On: TOTP for 2FA is incredibly easy to implement. So what's your excuse?

[unethical_ban]

Time drift is the clients responsibility. You’re letting perfect be the enemy of good - very few people use fully offline devices for years at a time, and if you’re not a bank, even something like a 2-5 minute diff is tolerable.