[miki123211]

Systems that are based on one-time codes instead of permanent credentials are really under-appreciated in the anglosphere.

Giving your credit card to your child / friend / spouse / subordinate, so that they can buy something with your money, is a lot more risky than giving them an OTP, valid for a single transaction, which you have to approve in your app anyway.

Poland's Blik is based on 6-digit codes, which makes this feature even more useful, as you can E.G. dictate that code over the phone to a trusted acquaintance at the ATM.

[navigate8310]

Because those OTPs can be intercepted by any MITM unless you are using on-device 2FA generated by an app.

[xk3]

> intercepted by any MITM

Most things are... even SSH is Trust-on-First-Use. You can really only verify out of band. OTP is quite a bit better than CC or bank account numbers... assuming the OTP is only restricting use (and not giving access to view or modify other account information, etc)