Hacker News Reader

Author also confuses backup codes with TOTPs.

OP here. It's a typo and should read OTP.

This accidental confusion between TOTP and OTP is by itself an argument against complex alternatives to login+password.