This isn’t a Gmail issue, this is a Netflix issue. I had the same type of email come to an account that I didn’t use for Netflix, and it was a single-click login to someone else’s account. They’re sending a link in plaintext via email that requires no authentication to access your account!
Is it surprising that access to the associated email address grants access to the account? This is the security model of an awful lot of websites (including the one you’re reading this on) because that’s where password reset links go.
This isn’t a Gmail issue, this is a Netflix issue. I had the same type of email come to an account that I didn’t use for Netflix, and it was a single-click login to someone else’s account. They’re sending a link in plaintext via email that requires no authentication to access your account!
Is it surprising that access to the associated email address grants access to the account? This is the security model of an awful lot of websites (including the one you’re reading this on) because that’s where password reset links go.