My 'UK' bank recently dropped using the password completely, likely because someone pointed out to them that since you could simply reset the password via the S

My 'UK' bank recently dropped using the password completely, likely because someone pointed out to them that since you could simply reset the password via the SMS 2FA, it was essentially pointless. So now the SMS and a 5 digit PIN are all it takes. Eventually they'll figure out that the PIN can be reset via 'just an SMS' too. 'security'