Yeah, same with forcing ISPs to save connection data on all users long term. European court slapped on the hands a couple of times, still not done. Like some kind of undead policy

To add on this: removed because it was clear the vote would not have been in favor.

Was pretty clear that it would return sooner rather than later.

At the end of the day it is a matter of preference and convenience. Is it safer to separate them? Absolutely. Is it as convenient as keeping them in one place? Absolutely not.

So, pick your poison. Personally I have my MFA tokens in three separate locations, two self hosted server applications and in a mobile app (2FAS Auth). More for fallback/backup reasons. Having them in my password manager is just too convenient.