[mont]

With a PM you're trusting that the PM is:

  a) Trustworthy
  b) Secure

With TOTP/2FA you would need to crack both the PM/password and the second authentication method.