Oh, yeah, and of course there's someone on the internet talking about the MFA protocol that no corporation uses.

That one is obligatory too.

(Anyway, yes, if you need MFA, use TOTP. That's a non-brainier. Except that corporations don't have brains.)