Given that nobody uses TOTP with Sha256 today I assume there is no real reason to upgrade. But has anyone actually reaserached this? For all we know, using hma

Given that nobody uses TOTP with Sha256 today I assume there is no real reason to upgrade. But has anyone actually reaserached this? For all we know, using hma-sha256 in TOTP may actually make it less secure.