


I have a HELOC with bank of america, as far as I know unauthorized transactions are covered by BoA policy and they would make you whole, but I am not aware of which laws would force their hand. When financial institutions want to take security more seriously I will join them but not going to jump through hoops for them. I would not be bragging about my investing prowess, cryptos, and stonk gains to Uber drivers and bartenders. Exception is if I was a high profile individual likely to be targeted by foreign intelligence or organized crime (based on the information I know today - might say something different in a few years). A few thousand dollars in a checking account and a credit card I have basically no legal liability on for fraudulent charges would not push me towards lowering my convenience for theoretically improved security. I hope this isn't too controversial, but security is a tradeoff. If it was a Merrill Edge account with a lot more money in it I might do it.

Rather than adopting a Yubikey I'd mitigate risk by keeping only a small amount of money at Bank of America if I was using it for checking or credit card.
