"never" is a strong word. I know at least one (fairly large in it's country) bank that does credit card based auth. And if there is one, there probably are others too.