[brent_noorda]

The link isn't actually created until you respond to an email saying "did you really create this link?" So it is as secure as your email is secure.