I think the biggest issue is the 2fa for transactions which is annoyingly inconsistent between allowing SMS verification and requiring an app 2fa. I know that I have had fairly consistent issues with capital one in this respect, I don't know if it is prevalent elsewhere