Fair.
But with the simplicity of TOTP, I would expect it whenever there is 2fa in a service. Plus passkeys are not as widely used or even known as TOTP.
Also I remember Lemmy 2FA causing some issues at the beginning, locking people out of their accounts.
Oh yes, that did happen. But it was the fault of the Lemmy devs, not because "TOTP is bad and hard".