Sure, but TOTP still defends against password leakage. So it’s still more secure than only using a password.