Well for banks there is competition (and largeest german consumer bank - Deutsche Bank/Postbank offers a non-smartphone based authentication device [0]). Not so much for government run railway.

[0]: https://www.postbank.de/privatkunden/services/online-banking...