[theandrewbailey]

It's exchanging one authentication factor (something you know) with another (something you have), while negatively impacting UX (by adding email UX issues) and not adding meaningful security.