Comment by definitelyauser

"Secure" is relative.

I have a system I use where you enter your email and get a one-time code.

The goal in that system is not to securely authenticate you, merely to identify you. "Good enough" for the use case.