As stated by keepassxc: yes to in the same database results in a single point of failure but the easy and good solution is to store them in a separate database. Definitely more secure that stuff like some authenticator app on the same phone where the otps are used
It's more difficult when you work with a huge legacy code base that is full of them and you have to do days of work in oder to rewrite and test everything rather then just use one.
I first thought this was an escape from tarkof meme