TOTP was definitely common decades ago. E-Trade for example supported it before KYC was mandated.