I still use my HSBC bank account from time to time, so I stand by what I said. In fact, I just checked this for you.
Logging in to HSBC's web UI requires me to "Generate and enter the six digit security code", using my hardware token, which I never have when I need it.
I just need the token if I'm doing 'something' with money
And no Indian accent on phone service
Another bank I know uses your card as a token, requiring you to have your card + a card reader. Better in some aspects, worse in others.