My (soon to be ex) bank recently decided to make everyone use their ID card number which can be obtained from many sources and does not change, a username with symbols and numbers and minimal length requirements which cannot be changed and a 4 digit pin code. No 2FA at all, so its only saving grace is that you get locked out at 3 tries.
I’m guessing they are trying to align everything to their legacy ATM pin code system instead of making the ATM system better.





Sadly, they still get hit by sanctions when it comes to banking, software, etc.
If Europe and the rest of the world doesn’t immediately defend it, it might be done for.
This also will probably accelerate the decoupling from US services and software the rest of the world has been working on.