The customer support rep once let me into my 2FA Bank of America account when I simply lost my phone. Just had to answer some questions you could find in a WHOIS query.

"Surely financial institutions are more secure" is only a pleasant thought.