I understand you want to send an email so you can verify this is the email owner, but once the account is verified, why isn't it enough to login via a email+otp directly?
All the services I can think of either send you a verification mail with a login code, or let you enter a rolling OTP, but not one I can think of requires both.
I fgot into a situation where peerbook had to rate-limit the emails to me.