The option to use TOTP is already well hidden. It’s not like someone who does not know what he is looking for and uses an Authenticator already will accidentally select it.

I mean, other file sync apps upload everything to a third party while you’re working with the device.
Then, when you use another device the first one can be turned off.

Most x86 EFIs are, so the comparison is not really fair.

That’s Canonical building Mir 2.