[joeriel]

> If the institution needs more confidence, it can feed back and ask for additional mechanisms: more biometric data, for instance, or an old-style password.

I get the feeling that early adopters of this would end up erring on the side of more confidence and still ask for "old-style" passwords. So basically, 2fa on a more widespread/intrusive scale.