Comment by alpineman

Yes. Leaking a password via a photo is completely different from leaking a 30-60 second TOTP.

Someone would need to:

1. Request the TOTP

2. Stand up and walk back

3. Take a photo of their desk with the TOTP visible

4. Send it to someone who can use it

All within 30-60 seconds. Just such an edge case it's not even worth thinking about.