But MFA is there to prevent this compromise from affecting the service and alert users/admins to the compromise, right? If you have username and password and a

But MFA is there to prevent this compromise from affecting the service and alert users/admins to the compromise, right? If you have username and password and are able to force the TOTP in the 60s window, the TOTP would be useless imho.