It still does provide protection against the attack where someone looks over your shoulder while you type the password, since the TOTP is a rolling code