Most of these patterns are fine if implemented correctly. It's not hard to trigger a modal with a URL for example. Password managers work fine with multi-page

Most of these patterns are fine if implemented correctly. It's not hard to trigger a modal with a URL for example. Password managers work fine with multi-page forms, you just have to label the inputs correctly and the user might have to press a button twice. Magic links are fine, and can even be good if it's you include a log-in link in the email that does the work for you. Certainly better than a weak password (most people don't use password managers). I'd suggest that implementing a magic link for log-in would be superior to all of these recommendations because it's a better layer of security than the _literal nothing_ most people use to secure their accounts.