Mobile application flow requires a mobile device, a qr scanner, and that you are logged into your mobile app. It's arguably a worse experience for the user and yet this is what Citibank went with.