That's a vulnerability of Authy's service, not TOTP. I have some of my more important services tied to an older Yubikey. The only attack vectors for it would b

That's a vulnerability of Authy's service, not TOTP. I have some of my more important services tied to an older Yubikey. The only attack vectors for it would be on the server-side and the physical key.