You should threat a phone as an infected ground and do not keep anything important there.
Some leaders simply do not use smartphones and are protected from electronic spyware.
Never had a bank without a usable web app. You should consider the same!
Stop shooting the web in the foot.
A) on mobile, use my face or 6-digit pin to get in.
B) on web, go get my wallet where my ID is, hunt for the USB digital ID reader, grab a USB-C adapter, put everything together, and either confirm the certificate with a PIN I always forget or use the bank’s own calculator for a login code.
Not exactly a fair setup for the web.
Storing credentials and passkeys in browser password manager (backed up to Google or Apple) and using autofill is pretty normal stuff for mobile users today.
(Not being able to find your credentials or keep your gear in order is also not a great reason to shoot the web in the foot!)
As a stay-at-home dad: my bank account is indeed not worth attacking.