Comment by ravloony

Doesn't this mean that an attacker now only needs the password to the email account and all these passswordless services get compromised as well?