Many modern banking authentication methods collapse onto a single device, creating a dangerous trade-off between convenience and financial security. We analyze the threats.