> Of course, as stated in the article, such email links are harder to phish than passwords On the other hand, training users to expect and use hard-to-read log

> Of course, as stated in the article, such email links are harder to phish than passwords On the other hand, training users to expect and use hard-to-read login-links in emails is not really good either. It promotes a broad range of scams, phishing, and potential malicious code exploits, even if the a particular sender's site has been hardened somehow. (e.g. a TOTP app on a phone.)