CommSec MFA update
I've emailed CommSec asking if using their app will be mandatory, and they've said it won't be.
"Customers who only use the CommSec website and do not have the CommSec app do not need to register for MFA. However, MFA provides an additional layer of security for website logins. Customers can access this feature by downloading and setting up the CommSec app."
I've also asked if they plan to support third party authenticators but I haven't heard back on that yet.