offering TOTP MFA auth is important for people who actually keep at least some minimal boundary between their passwords and TOTP seeds.