This would work if your email address was somehow tied to your browser for "remote logins" (via native implementation? add-on?), and a little popup just showed up.

Or, I think a mobile version where you got a text would work (since typing on a little screen is harder than opening a notification).

Otherwise, it seems worse than passwords.