Very true, however as others have pointed out it all comes down to levels of security. There are many non important accounts where I have 2FA, and both the pas

Very true, however as others have pointed out it all comes down to levels of security. There are many non important accounts where I have 2FA, and both the password and the TOTP is in 1p. This should suffice for any brute force password attacks. However there are some accounts (like google) which one can consider more important for which I keep the TOTP on a separate app like Authy. More recently I've been switching to yubikeys where possible.