Hard-line answers like that are why we're all building our own cages from a privacy perspective.
The market simply does not care, and businesses are acting accordingly and picking the lowest friction option with acceptable levels of fraud.
What’s odd to me is that they dont even have a method for more advanced users to not use numbers. I think perhaps Digital Credit Union may be the only bank in the US using passkeys.