> This is terrible for account security

It's "terrible" because the author can describe exactly one phishing vector?..

Have you ever tried resetting a password before? Passwords have a similar phishing vector, plus many other problems that magic links and one-time login codes don't have.

If six-digit login codes are less secure than passwords, the reasons why are certainly not found in this article.