We need a law that impose AVOIDING mandatory "smartphones" usage for anythings, starting from banks OTPs IMPOSING offline time-based classic OTPs or SSL certifi

We need a law that impose AVOIDING mandatory "smartphones" usage for anythings, starting from banks OTPs IMPOSING offline time-based classic OTPs or SSL certificates or SSH-based auth (never seen outside IT but very nice indeed) or classic matricial cards. IMPOSING open APIs. That's before discovering we can't be cured after an car crash because our smartphone can't properly identify ourselves with emergency care smart systems, or we can't enter our hose due to an e-ID vulnerability of our connected door.