The problem is that TOTP is so weak that it's almost not a second factor. It's something the computer knows, so it's more like a non-human password than a "Som

The problem is that TOTP is so weak that it's almost not a second factor. It's something the computer knows, so it's more like a non-human password than a "Something you have" That said, most people probably don't even have TOTP, so these farms are probably not targeting them yet?