Comment by AndrewDucker

If the link is sitting in their email then surely that's just as unsafe as having the password there?