@b902f84f I am no fan of Google but Google Authenticator requires user interaction to upload OTPs to the cloud and the interaction is surprisingly clear.