FWIW These days 1password supports TOTP directly, pretty smooth in the browser.
If someone gets into your password vault, then they have both authentication factors: your passwords (what you know) and your 2FA secrets (theoretically, what you have).
[1] https://blog.agilebits.com/2015/01/26/totp-for-1password-use...