Im not OP, but that can often mean they arent using a secure 2FA like OTP codes.

Not having any, or only using sms can be a really big risk since your phone number can he a path to open a lot of security risks.

Its wild that for a long time (and maybe even still) banks only had sms. I was about to leave my trading account over sms only, but they ended up adding OTP.