They don't appear to even have basic protections against ai. They didn't even get rid of the context menu to download them, and the app shows up in google image search which means google has the thumbnails. It's a losing battle, if you can see it so can ai, but they could at least but a few speed bumps.
they just send a OTP to your email with the idea that you should be keeping your email secure (and that email providers are more secure than they can be)
Given how common it is for people to use the 'reset password' link for this exact purpose, it does make it seem kinda redundant to even implement passwords on many services to begin with.