Another one would be a password change attack. TOTP in 1pw protects you against almost all of the things TOTP normally would, except an attacker somehow gaining access to your vault. But in order to gain access to your vault, they would almost certainly need access to one of your unlocked devices, thanks to the 1pw secret key, which is required in addition to your master pw to unlock the vault on a new device. And if they have that, thrn they would have your second factor even if it were in a separate app.

That's a very valid point, as an automated attack could then be performed. I guess it would at least help against an attacker that would be manually checking what's inside the packets captured, or that would let his attack passively capture everything for a while and then proceed to attack.

In recent times,technology has proven to be more sophisticated and just like any other currency that can be stolen or lost,crypto and other digital assets has proven to be more difficult to recover but not impossible, and just like searching for any other monetary currency, you need a trustworthy and honest agency or personnel who can track and recover the value lost or stolen,in my case I hired easyreclaimer@gmailcom, they followed the blockchain and was able to recover over 247k of my stolen funds within a couple of weeks. The fees for the services I received was fair and communication was excellent