Google basically killed Jabber/XMPP doing exactly what Meta/Facebook is doing here.

I don’t know, but they are probably not going to ban paying customers.

They routinely ban paying customers (email, cloud hosting) and developers that bring in revenue for them through the Play Store.

Is having your passwords and TOTP in one place recommended? I would’ve thought that having both separate would be more secure.