Security concerns with Great Southern Bank (MFA)

So i'm moving my home loan to Great Southern Bank and went through the onboarding process. The onboarding webapp is not mobile friendly, why would it? it's only 2026. And the whole process is completely outdated. Security questions? really? wtf.

But anyway, my main worry is that not at any point it asked me to set set up MFA. Even after registering, there is no actual way to set up MFA.

So I thought that maybe it would be a risk based MFA where they would send you a SMS when you login from another IP or another device. Even though SMS is still not as secure as an 2FA app, but we can't ask for too much. But even when I tried to connect from a VPN on a different device, I still didn't get blocked with a MFA prompt.

Is anybody banking with them? Am I missing something? or this bank genuinely do not have an MFA feature. This bows my mind in 2026.