To be honest: we are using a mobile banking app. Not an only online banking access. Means, everything should be stored on my phone, except banking updates of course.
For example, I am using an IPhone. There I have at least Touch ID. Security enough.
And in my opinion it is totally contradictory to have access to every detail only if youโre online or to take pics of my virtual cc and store it offline when I am using an app. Than I could use the app of my stationary bank....