Comment by xdxfw

This creates a dependency on the email. If your email gets compromised/locked, your account gets too. OTP passwords are better