Because it would be fragmented and have 1000 incompatible implementations if it ever got that far. Large institutions would prefer something they control 100%,

Because it would be fragmented and have 1000 incompatible implementations if it ever got that far. Large institutions would prefer something they control 100%, email and SMS are only used because they became ubiquitous first. But some companies use their apps as a secure alternative.