> Authenticator apps aren't much better. Look at their privacy policies.

For the most part, "authenticator app" means TOTP, which isn't proprietary.

Which is beautiful because you don't actually need any app for it. Just save the TOTP seed. There are plenty open source implementations to compute the one-time code when you need it.