Comment by SpaethCo

TOTP or SMS, it's just another text password you're entering in that's fully phishable.

TOTP just "feels" more secure.