[throwway120385]

TOTP is more secure in that you can't be simjacked by someone impersonating you in the cell phone store.

[SpaethCo]

That's assuming your attacker already has your password, or the service allows SMS password reset. (thus negating the second factor. Essentially SMS becomes the only factor.)