Not necessarily, some services would have the magic link verify the session that triggered it regardless of browser or device.
I assume it generates a session on the post-login screen and authorize that session upon accessing link
I assume it generates a session on the post-login screen and authorize that session upon accessing link
People blindly click links all the time. It would have a low success rate, but would be more than 0%.