In my experience and in talking with friends, we don't know of a single US bank that uses standard TOTP for their two-factor authentication.
The only 2FA options seem to be SMS, email, or upon occasion proprietary 2FA built into their mobile app (Or Symantec VIP, in the case of USAA).
One argument I've seen is that banks have to balance availability and security to their customers and lots of people wouldn't know how to secure their 2FA codes or backup codes. Fine. Why not have it as an option for those of us competent enough to use the technology? It is more convenient and at least as secure as email 2FA, and better than SMS.
The only 2FA options seem to be SMS, email, or upon occasion proprietary 2FA built into their mobile app (Or Symantec VIP, in the case of USAA).
One argument I've seen is that banks have to balance availability and security to their customers and lots of people wouldn't know how to secure their 2FA codes or backup codes. Fine. Why not have it as an option for those of us competent enough to use the technology? It is more convenient and at least as secure as email 2FA, and better than SMS.