Passwordless signin via email link

[erlend_sh (Erlend Sogge Heggen)]

@terraboss

What if an attacker catches the plain text mail and login (maybe automatically?) - in first place to get control over the account.

This is the same threat level & attack vector as intercepting your password reset link, which is already a default feature.