That would be all. The other reason I would move to supertokens OTP once it's available is to have less thing to worry when it comes to security (using your solution instead of a custom one).