If I call my bank, the bank personnel can (and do) request a challenge to the 2fa app. Same with connections over the Internet. The 2fa app is driven by a sepa

If I call my bank, the bank personnel can (and do) request a challenge to the 2fa app. Same with connections over the Internet. The 2fa app is driven by a separate company that only does identification service.