@mntmn my bank in my home country has been using these for decades… in addition they offer an app… but the app still requieres the code from the token generator in addition to the regular password. In addition for some unusual transactions it will ask for an extra sms based OTP. We don’t have laws requiring banks to do that.