I'm unconvinced that biometrics are a good approach. You can't change them if a compromise is discovered.

I also don't like it but it seems to be what most institutions are going for.

It's a strong factor if required in person, the problems start when accepting it remotely. But having to go to the bank seems like the past.