I think the problem is showing the "magic link" anywhere other than in the email for the intended recipient, since it's effectively a password. As others have

I think the problem is showing the "magic link" anywhere other than in the email for the intended recipient, since it's effectively a password. As others have mentioned though, if you as a user know someone has access to said password and you're resetting it as an emergency, that's 3 more days of some hacker being able to log in with your password!