Yes. And yet my bank is adamant in using it and not offering real 2FA. But to play devils advocate, this is why it is a second factor. Your password should be strong. If by some miracle, that fails,...