I worked in IT ops there for a long time, and since then have seen the inner workings of companies in several different fields.

They had by far the most competent cybersecurity group I've witnessed. Things have changed in a decade maybe.

But, they still use proprietary TOTP from Symantec which is annoying.

> But, they still use proprietary TOTP from Symantec which is annoying.

They at least used to, but I'm not sure they still do.

(And when they did, I was able to copy the key into a MFA app of my choice.)

But now as an end-user, it's all built in to their own banking app. I don't use the code from the app though, because I just use my personal 4 digit pin (after entering in my unique password from my password manager).

Yeah I've never worked there, but been a customer since 2005. For many years there, USAA was really cutting edge of tech and highly competent. The system has slowly gotten a little less usable though, but at least it still works most of the time