I greatly respect partially authenticated links when I'm emailed about service issues. The same would apply if I wasn't recently authenticated (using a cookie f

I greatly respect partially authenticated links when I'm emailed about service issues. The same would apply if I wasn't recently authenticated (using a cookie from more than a day ago). Provide read-only access then enforce auth only when mandatory for write permission. Ideally verify my hardware 2FA or a security code generator (but not sms).