Yes, you can use TOTP, but TOTP can be phished. The article I was responding to, was written regarding U2F keys, which is a different protocol, with protection

Yes, you can use TOTP, but TOTP can be phished. The article I was responding to, was written regarding U2F keys, which is a different protocol, with protection for this scenario.