Very true, however as others have pointed out it all comes down to levels of security.
There are many non important accounts where I have 2FA, and both the password and the TOTP is in 1p. This should suffice for any brute force password attacks. However there are some accounts (like google) which one can consider more important for which I keep the TOTP on a separate app like Authy.
More recently I've been switching to yubikeys where possible.
I remember pushing for this when i was at Google ~5 years ago. I wasn't on the team but I wrote 2 proposals, one to do QR code export and imports and another to sync codes using the google backup framework.
Neither was approved nor denied, just in limbo. But nice to see that both features have finally shipped. Sadly I have switched away to 1P, too much effort to move it all back.
I get where you are coming from. However with their cloud offering you get to forget about some of the not easy parts of Temporal and just build something awesome while benefiting from all that temporal has to offer :)
I've seen Slate. I know CircleCI uses them. Personally however I am a huge fan of redoc. Something about the way redoc looks and the way it is served makes me want to pick them over slate.
They are building on top of Cloudflare, and getting started is a breeze.
That being said they are also fairly new, but based on everything I have seen, I am a fan