As long as there is a backup recovery mechanism, this seems fine… that said, I’m a big fan of magic links + long session expiries. Email is already a single point of failure, might as well lean into the convenience of it.
I find it inconvenient to have to open my email to log into a site instead of letting my password manager handle it.
The moment you start using multiple email clients, multiple browser sessions, or a combination of the two, magic links become a gigantic pain in the ass.
My sideproject is hiring it’s first w2 employee, so that’s exciting. It’s still a sideproject unfortunately because I can’t afford to quit my main job yet - but hopefully soon.