>TOTP 2FA is already adequate to make sure you're not credential-stuffed.
PAKEs provide defense against both credential stuffing, (some types of) phishing/MITM, CA trust etc without UX cost (a security solution that "Just works" for users with security apathy. U2F defends against compromised user space (PAKEs would fail to protect against a key logger) and require more onerous exfiltration (either physical theft of the device or biasing the U2F keys/functions)
PAKEs provide defense against both credential stuffing, (some types of) phishing/MITM, CA trust etc without UX cost (a security solution that "Just works" for users with security apathy. U2F defends against compromised user space (PAKEs would fail to protect against a key logger) and require more onerous exfiltration (either physical theft of the device or biasing the U2F keys/functions)
Wiki's:
https://en.wikipedia.org/wiki/Password-authenticated_key_agr...
https://cryptowiki.net/index.php?title=Password-authenticate...
Blogs:
https://blog.cryptographyengineering.com/2018/10/19/lets-tal...