branded physical token is "a thing from my bank", so something they are responsible for, that for my POV came from them, created and maintained by them, it's no

branded physical token is "a thing from my bank", so something they are responsible for, that for my POV came from them, created and maintained by them, it's not connected to anything and it's a standalone object. My phone is a connected device, monitoring me constantly outside my control, controlled by the most powerful data mining companies in the planet. I simply can't trust my phone. I can trust enough my physical offline devices and if it will be cracked sometime I'm completely not responsible for it, my bank is. While with my phone it's really easy to say "it's because of this or that, not our faults" where this or that can be anything from unupdated fw (by the vendor, of course), unsafe apps installed, ...