Comment by reactordev

I agree but this can be done today with current tech. All you need to do is incorporate the full picture.

Something you are (biometrics, voice id, whatever)

Something you know (PIN, super secret password, your dog's mothers maiden name)

Something you have (MFA, AuthCode, PushNotif)

And even then, be cautious of anything that would be deemed an "admin" operation. Such as transfering of funds, issuing a check, or adding an external account.