Follow up question - what are some tools that can help implement secure passwordless auth?
1. SuperTokens - https://github.com/supertokens/supertokens-core (seems to have most extensive feature sets and support for multiple passwordless methods - email, phone, otp, etc.)
2. Paw.js - https://github.com/jrjr/paw.js (looks like an implementation of passkey, interesting)