Oh yeah totally agree with you on all of that.

I wanted to make sure the limitations were pointed out that TOTP doesn't itself protect against sophisticated MITM/phishing attacks which a lot of people I've met thought.

But it absolutely provides some level of protection against unsophisticated attacks, and it's still helpful even inside your password manager.