Passwordless is fine.

Let’s be honest all forms of auth suck and have pros and cons.

The real solution is detect weird logins because users cannot be trusted. That’s why we build for them!