> intercept SMS 2FA codes for online banking

Google should just ban all apps that use SMS 2FA codes for login.