Interesting. Does "offered" mean it's not mandatory?
Wait, American banks don't go with extra authentication? I couldn't log in anywhere without SMS or additional apps or whatever. Depending on your bank you might even have to go through three different stages of authentication. Over the pond you just go username / password?
Ahhh, I see. That's why.