Consensus in the security space is that passwords are really bad. So many products are migrating away from passwords to magic links/passkeys.
If magic links become increasingly common then email† account access increasing becomes a single point of vulnerability/failure. And email providers obviously can't use magic links for auth. I dont know what the solution is.
† or IM services