Telling me (or my wife) to log into my account for sensitive information may be a good idea, but including a link in the email for the purpose does not seem to

Telling me (or my wife) to log into my account for sensitive information may be a good idea, but including a link in the email for the purpose does not seem to be. It opens possibilities of phishing attacks.