Thanks. I agree with you, except a 6 digit code is worse than a good random password, or magic link with e.g. 64 bits of entropy.