Do passkeys next.
Passkeys don’t gate immutable financial transactions. (Pretty much everything you do in a bank’s website is reversible during the day to a few days out.)
Apparently in human societies "trust" is a feature and not a bug to be removed. Who knew, right? :)