There's no way anyone in Europe can use a bank account without a banking app. As I said, even if you log-in on a browser on a laptop, authentication still requires you grab your phone and use the banking app to authorize the log-in from that laptop once in a while, or any transaction.
Unfortunately, the solution you propose is technically too advanced for most people, including me. Is using GrapheneOS with its sandbox feature good enough of a protection?