Comment by gambiting

>>The android option of a few clicks under settings is definitely something I can see someone/some site convincing her to do.

Again, the mythical mother who will follow a stranger's instructions to enable developer mode and then follow detailed instruction to install an app bypassing several warnings along the way, but not one that will simply send money from one account to the other because of some random excuse from a bank "support" agent.

The proof is in the pudding so to speak though - despite every android phone out there having developer mode, this attack almost never happens. And developer mode doesn't give you root access or ability to access other apps data - she would still have to log in into her bank, and if she's willing to do that because a random stranger told her so then it's game over anyway, no need for custom apks.