I don't remember verifying TOTP in months. I'm pretty sure since I setup passkeys. Maybe it's not required if you have three methods setup.