Some companies understood and embraced this: Slack and auth0 can send you "login links" via email which log you right in.

Remove that pesky "password" from the entire "password reset" flow. Makes perfect sense (meaning: there's clearly users making use of it).

What's surprising about that? It's the easiest way to deal with a system where you need to log in occasionally.

So why not take advantage of that... instead of passwords just email the user a link they need to press to login.