Some SMS and TOTP are vulnerable to phishing, yes (combination with a good password manager reduces/eliminates this). That's not the only attack though, and it'

Some SMS and TOTP are vulnerable to phishing, yes (combination with a good password manager reduces/eliminates this). That's not the only attack though, and it's still better than nothing.