Which part of "confirm the transaction by opening the banking app on your mobile phone." does not depend on a banking app installed on a Google/Apple-controlled environment?