Why do I have to enter a second factor (e.g. a TAN) when I want to connect a bank?

Since September 2019, banks have been required to perform strong customer authentication for each initial account access. This means that a second factor is also required when retrieving account information. See also category ➤ Regulation and financial supervision, the question: What is strong customer authentication?