What about those stupid two-factor authentication codes? We all know banks are stupidly old institutions and still use SMS two-factor authentication instead of the much more secure time-based one-time pads.
It makes me real confident in their security, let me tell you. /s