@molly0xfff one site recently wouldn’t let me log in until I set up 2FA, which turned out to be the same SMS one-time-code it was already doing. TOTP was not offered. Still not sure what that setup did.