Wondering why I was downvoted for pointing this out.

But anyways, my impression from reading the page was this is not just used as a password reset scenario but as a general login method.

Which if you agree with, leads us back to the scenario where authentication & authorization lies solely with the email account, which if compromised is the single point of failure.

I would appreciate it if someone were to help point out what flaws there in this line of thought rather than a straight downvote with no explanation.