> It's insane that my personal blog is more secure than my bank.

It's insane to imagine that that is true. :)

Seriously though, if banks and their customers were being defrauded by superficially poor password/MFA hygiene, obviously they would fix that. They are not.