Comment by jarsbe

It depends. I used magic links for a system where the user would log in every 6-12 months. It didn't make sense to force them to make a password.