One thing that's overlooked in this add-on's presentation is that an account needs to be created. I fail to see why this is sensible just to generate OATH/ TOTP. On the contrary, I see it as an unnecessary security risk and a needless disclosure of personal data.