And, the worst part is that because it is an "application" issue, it is possible that it is going to a "gift that keeps on giving" for a long time.
And the worst part is that most (indian) banks have been using only android/ios for "security" for some time now.