While you’re not wrong in principle. It’s still the least worst in the vast majority of cases.

I think the bigger problem is using your pw manager for 2FA too.