TOTP isn't phishing resistant
No it's not but it's better than nothing. Don't let the perfect be the enemy of the good.