Millions of people imperiled through sign-in links sent by SMS

Even well-known services with millions of users are exposing sensitive data.