In many countries it's already impossible to use just the web for banking. They either make you install rootkits on your computer or move you to their mobile apps

Wow, that sounds awful. You say country, which makes me wonder—is this the result of a popular type of law or something? I can’t imagine every bank in a country deciding to make that same move. But I live in a large country with lots of banks so I’m sure I have a very biased point of view.

> I can’t imagine every bank in a country deciding to make that same move.

Many countries have only three or four full banks (the kind that can give you a Visa or Mastercard bank card, let you send and receive transfers, etc.), and all of them are making the same moves.

https://en.wikipedia.org/wiki/Payment_Services_Directive tldr: eu mandates secure 2fa for online banking and most banks only implement it using their app as second factor.