Not quite, that's why 2FA is supposed to be a second factor, not just extra data in the same place. If your second factor is on separate hardware then even tot

Not quite, that's why 2FA is supposed to be a second factor, not just extra data in the same place. If your second factor is on separate hardware then even total compromise of the first piece of hardware (the laptop containing the password database) is not sufficient. The separate hardware could be many things. One is something like yubikey etc. Or a separate computer with the TOTP secrets, etc.