@dalias @ireneista @hipsterelectron Well by design there isn't a lot of banks, and websites typically requires you to use the app as authentication (I've lucked out on mine and so far it sends tokens via SMS), it's like a cursed version of 2FA.

And sure we can try to do fake environments for those, but I see it as a loosing battle, like how trying to pass captchas can often be.
In fact that reminds me of how I ended up IP-blocked out of legifrance.gouv.fr due to simply not having JS enabled by default, literally couldn't check the law anymore.