If it is compromised, both your passwords and TOTP are compromised, which kind of negates the point of multiple factor authentication. If they are in separate apps, hopefully both won't be compromised, at least not at the same time.