Hacker News Reader

Magic links are half factor auth. They're probably good enough for apps that no one actually cares about though.

Does that make a password + email password reset a quarter factor?

Password plus email is one factor. So that would be 3/2 factor auth.

Email reset isn't any different than a magic link. Adding an additional password option for login only lowers the security.