Online banking can do 2FA through texts, which is probably the least bad option these days.