[wright-goes]

Access to banking is indeed critical, but when? And for 2FA, which accounts, and when? As bank apps become more invasive and they also fail to offer substantive 2FA (e.g. the forcing of text messaging as a 2FA option falls outside my risk tolerance), I've segmented my devices' access.

The ability to transfer funds is something I'm now fine doing via a dedicated device with a dedicated password manager account, and I'm fine uninstalling banks' apps from my phone and dis-enrolling cell phone numbers.

Given the wanton collection and sale of my data by many entities I hadn't expected (naivety on my part), I've restricted access to critical services by device and or web browser only. It's had the added bonus of making me more purposeful in what I'm doing, albeit at the expense of a convenience. Ultimately, I'm not saying my approach is right for everyone, but for me it's felt great to take stock of historical behavior and act accordingly.