Using a security key instead of TOTP would have prevented this.