This question comes up all the time with KeepassXC… like its not a 2nd factor if the TOTP is in the same app as the password.

Factor 1 is knowing the master password, and

Factor 2 is having the password file.

Im not trying to suggest the KeepassXC is the best for all uses, but its sufficient for me in this context.