To transfer money to friends, I have to enter my bank password in all of these different origins (e.g. transferwife, google pay). The only line of defense seems to be SMS OTP verification. Shouldn't banks be the most advanced in online security?