TOTP Apps vs Windows Hello Passkeys for 2FA

If I use a separate, rarely used phone for TOTP on my computer, is it more secure than using Windows Hello passkeys? If my computer was compromised by malware, someone could keylog my Windows PIN and use remote control of my computer to falsify/bypass the passkey via the PIN. This would not work on their computer, but since they have remote control of my computer, they can sign in on MY computer. Is Windows Hello still more secure than TOTP?