I guess that is traditional 2fa that never occurred to me. Shouldn't we update that to include one-time passcodes like we do know for most things?
The only things I can think of that uses one-time passcodes are the occasional password reset or login from a new device? Are there other uses I'm not aware of?
Some people I know are still not comfortable using an ATM, if you add passcodes they are going to have a very bad time.