Passwordless login in Canva

Canva is one modern example that defaults to email-based passwordless authentication for accounts. An adversary with email access would be able to move laterally to this system by triggering the login process and accessing the resultant email.