I dislike Google as much as the next guy and I agree that you really shouldn’t use Google authenticator cloud sync, but the real problem here is the large amount of crypto. A scammer would have a much much harder time extracting it from a bank and even if they did it would likely still be reversible.