OK continuing to play Devil's advocate: In my country my mom fell to a sophisticated spear phishing attack and whilst on the phone with the scammer and he leveraged her app's login to make it easier and more convenient to attempt to send her money via Zelle.

I wonder if there's really evidence to support that the app's protect you from phishing attacks.

I personally think notifications suck and are spam and not needed, and that we could make something new and better we don't have that today though. What do you use the bank authentication for in your country if you don't mind my asking?