Also i would expect banks to use some sort of 2FA where you have to manually confirm any transaction on your mobile device, or enter a code generated from there into your computer.

No security measure is perfect. When doing security-sensitive things, it’s better to wait when you’re home on an uncompromised network.

But yes, the chances of something happening is very small, even when using an unknown network.

They don’t let me choose a password longer than 6 characters. I don’t assume anything about my bank’s security.