That is true, though you could keep your password and totp databases separate theoretically. I’m not sure if keeping them in say separate apps brings much benefit if your phone/pc gets compromised though, as most people would have both available on their device… totp is more about convince, it’s never as secure as a hardware thing say yubikey.