I don't think it's a good idea to have both the passwords and the 2FA in the same app. But it does make it much more convenient
You mean hole in (...) roof