Hacker News Reader

IT admins at your org can enable or disable 2FA methods allowed via the Duo administration console. Many US edus disable TOTP.

I think because they don’t want to deal with supporting the app and (almost) everyone has a phone that can receive calls.