I disagree. Most phones can only run proprietary operating systems and the modem runs its own proprietary operating system, which very likely has access to system memory. Your phone carrier tracks you everywhere you go and can listen to your phone calls.

i may just be an old fart, but i dont believe biometrics are secure for most applications. normie phones are sadly easier to break into, physically or with malware, especially if the operating system is not foss. if you are also using your phone as 2fa for the bank, then thats as good as nothing: 2fa device should be different to the login device, for sensitive logins. most banks have their own goofy ahh proprietry 2fa app, not a usual totp. i just dont get why some people are so adamant on banking on a phone. its only marginally more convenient; we all used to manage without phones. a lot of banks also enforce stupid password like exactly 8 characters long. i think any app that doesnt work on a rooted/ungoogled phone is immediately sus.