I don’t know about the US but on this side of the pond banks have their own 2nd factor apps. So to log in to a bank’s website you need an app - quite probably with play integrity.

Re-read your original comment, m8. If you really didn’t want to condemn all hacking, then you did a good job stating the exact opposite.