Agree. I want to hear the same about magic links. The thread you linked about does not talk in context of an "average user". Security choices we make in context of an average-user vs power-user can be a lot different.