Forced 2FA for banking in the EU is making this worse when it doesn't work