News for hackers. Stuff that matters.
Re:Getting 2FA Right in 2019 by UncleMeat on Thursday June 20, 2019 @03:15PM (#20236262)
Unique passwords wipe out password leaks as a vector. Anything where you type in a code is also still phishable.
Re:Getting 2FA Right in 2019 by scrollaway on Thursday June 20, 2019 @09:02PM (#20238984)
People can still log into your account if your unique password leaks. It just prevents them logging into your other accounts.

Point is, TOTP isn't useless.