I honestly find 2fa enforcement detremential and it should be entirely possible to opt out - case in point my current bank (not by choice, ridiculous country that can't manage to join the euro) are disabling SMS 2fa for online banking and suggest using their app, except the app doesn't work (they'll still send 3ds via SMS though!!) and they've basically stopped bothering to reply - anyway the point really is that people who are not morons should be able to opt out, because the onus and damage on the end user often outweighs any possible risk of stealing funds etc (there's literally nothing in the account, standing order sends all of my income to a useful bank abroad the day after it arrives).

As an aside, open banking is also a joke as it doesn't allow the end user access to their own account, only 3rd parties - simple API access would make this problem moot, as where I hold my funds grants me API access and I can do things like trigger transfers on webhooks etc, very simple and infinitely useful.