The best argument against e-mail based…

The best argument against e-mail based authentication is that it’s impossible to guarantee the delivery of e-mails. Once a user says they've checked spam, there's basically nothing else you can do for them beyond checking your configuration for the millionth time.