It's simple, it works with the dumbest of mobile devices, and people understand it.

Even installing and using a TOTP app, and configuring it to work with an online login, is a hurdle that a non-negligible number of users cannot pass.

It's better than nothing.