FWIW "SMS 2FA" or "email 2FA" can also be done from the same browser (google voice or similar, webmail) and I've used both with banks.

That said, there is one major bank I use that still allows password only.