Certainly you can use those, but they're not mandatory (here in Canada at least). Can easily get a card and use physical bank and ATM to do everything, and website logins use email as 2fa.