I thought about this a few years ago. It made more sense back when WebAuthn was a thing but Passkeys weren't; when you had to just accept that buying a new phon

I thought about this a few years ago. It made more sense back when WebAuthn was a thing but Passkeys weren't; when you had to just accept that buying a new phone meant losing all your WebAuthn keys. In that scenario, WebAuthn made sense as a UX improvement to the standard magic link auth flow, allowing users to use the faster, more convenient WebAuthn authentication method on devices they've already signed in on at least once but without having to rely on it as the primary means of authenticating. Now that Passkeys are a thing they are much more viable as a primary authentication method since you can lose your phone or switch PCs and still have access to them. But as long as you're allowing pass(word|key) reset using email anyway, it certainly doesn't hurt to have magic links as an option.