I was thinking something like this, but instead of no pwd at all, replace pwd with OTP. Many sites require some kind of OTP anyway. Is it secure to use email+o

I was thinking something like this, but instead of no pwd at all, replace pwd with OTP. Many sites require some kind of OTP anyway. Is it secure to use email+otp only for login authentication?