However, it does have its limitations, particularly in terms of security. Is this a problem that actually needs fixing in the real world? Most "real world" ex

However, it does have its limitations, particularly in terms of security. Is this a problem that actually needs fixing in the real world? Most "real world" exploits I am aware of regarding TOTP center around SMS vulnerabilities. For which there is a simple and obvious fix --- don't use SMS. Instead, generate codes locally. If TOTP is too difficult, will passkeys be any better?