My credit union had that for years but you had the option to choose from a set of available images.

They replaced it last year with mandatory SMS 2FA. I immediately sent them a message about how insecure it is but never received a response. What a terrible regression.