Or these shitty fake 2fa photo tan things they have here in Germany. Something you have (your phone, with saved passwords) and something you have (your wife's

Or these shitty fake 2fa photo tan things they have here in Germany. Something you have (your phone, with saved passwords) and something you have (your wife's phone, or just a device to take a photo of your screen to show it back to your actual phone) isn't 2fa. But it makes it so painfully difficult to do anything that a valid step for security, like quickly contacting the bank to say “my phone is untrustworthy” via another device, becomes unreasonable, difficult and unlikely. (But in general, trying to do anything in Germany is a painful experience. The business culture here seems to be, “if it's beneficial to the customer, it's a cost centre to us so please remove it”.)