The need for you to do banking, and employees do MFA on a phone and thinking that doing requires a secure and closed phone is again a spillover of offloading costs to users.

We did have hardware tokens for corporate logins and banking needs.

There is no real reason why an open phone cannot be secure for sensitive applications.