Two factor authentication AKA pain in the arse login process

authy.com/download/

Yes the MacOS download will work on a desktop or laptop.

The team have seen the light and that is being implemented, so lenders will be able to opt-out of having to use 2FA for logging in as long as they read the appropriate warnings etc.

What I wonder about is whether the whole site is safe from cyber attack. How does the number of big names that have had some hackers get at the whole thing compared to single people being hacked ?

There's also the social engineering aspect of attackers targeting staff, etc.  All are issues that are taken very seriously, with time, resources, and money being invested to mitigate the risks and protect lender funds.

I would see the ideal balance as being requiringing 2FA only when I'm logging on from a new device, or when performing a "sensitive" operation.

Requiring it on every login from every device would tend to reduce security, as it makes users more vulnerable to MITM attacks using a phishing site [Edit: or more precisely, just as vulnerable as they were before the introduction of 2FA] (if I'm already using the 2FA several times a day, being asked to enter the second factor when I reach the MITM phishing site could just seem routine, rather than alerting me that something phishy might be going on).