SHA1 was the official standard when TOTP started being widely deployed. I wouldn't worry. If you look at how the hash function is actually used in the TOTP algorithm, it would be very hard to exploit SHA-1's vulnerability to finding free collisions. It's much more likely that either the server or the client app gets pwned somehow.