Not really? Even in the same basket, having TOTP and passwords on iCloud mitigates a lot of scenarios, such as leaked passwords. Depending on your threat model

Not really? Even in the same basket, having TOTP and passwords on iCloud mitigates a lot of scenarios, such as leaked passwords. Depending on your threat model, this solution is ok — way better than no 2FA at all or SMS. 1Password has a nice article regarding this point: https://blog.1password.com/1password-2fa-passwords-codes-together/ https://blog.1password.com/1password-2fa-passwords-codes-tog...