So as I mentioned in another comment, it's not entirely security theater. If the site enforces that an MFA token is truly one time use, then this can prevent replay attacks of your credentials being used to create a new session.

If someone compromised your password store, then yeah it's all over. But if the compromise happens elsewhere, it can be a useful layer to the security onion.

Why? It depends on your scenario. If it is “attacker gets hold of my wallet” then yes, you’re screwed.

But 2FA still helps if a single password was leaked/bruteforced/phished, and afaict most password managers in autofill mode recognize the browser url, so it’s quite phising safe (2nd factor won’t be autofilled on wrong website)

Security is not binary, and 2fa via password manager is still much better than no 2fa; it’s not pointless.

I agree, but not entirely. I.e. you can steal a password, but normally no password manage would allow you to export underlying 2FA code.

I have raised this point so many times. People tend to forget why they are using a particular technology in the first place

Never understood the point of storing your 2fa where your passwords are.