Another weird thing with their online banking...
If you want to transfer a thousand pounds to a new payee you need your chip reader and two passwords/memorable things.
If on the other hand you want to transfer more than £10,000 (say for a house purchase) you can’t do that online and instead speak to a nice person who asks for your date of birth and the name and date of birth of your joint account holder. Then a manager confirms the transfer details (but no further security questions) and Bob’s your uncle!