My bank has a "helpful" mobile app secured by a 6 digit code. The worst part is that some sensitive operations like adding an external wire transfer target and changing transfer ceilings can be done from the app and only from the app.