You are making the mistake of assuming that people make a decision about what institution to bank with solely based on what kind of 2FA they provide. In reality, there are many other factors involved. I ended up banking with these institutions for a reason. And I don’t know what the overall situation outside the US, e.g. in Europe, is but I think in the US there are few banks that offer something better than SMS 2FA. Some will force you or invite you to use their special app (which may or may not only work with SafetyNet) instead, which is absolutely not an improvement except perhaps strictly in the security sense. I think there are a few experimenting with FIDO2 hardware security keys but that is the exception. This is a problem that requires regulation not telling random individuals that they just need to git gud at picking a bank.
This is a very privileged position to take.
A very uncharitable assumption
You clearly do not understand how regulation is introduced. People moving to banks that already comply with a future/potential regulation does not bring about regulation.
This is not how things work at all. How is the bank supposed to know why you switched to another bank or why someone is banking with them.
It is for the most part not about the effort. You are expressing typical neoliberal “everything can be solved through the market” mentality. If people just put in the effort to buy the right product in the marketplace then everything will be alright.
This will be my final response as we will probably never see eye-to-eye on this and I have better things to do with my time than engaging in pointless arguments. This is not what I joined this privacy community for.