Even better.

Not so good if there is enough information in a single email to allow a successful "login" and takeover of the account but this risk could be mitigated by supporting encryption of the email. It would also be good if the link would no longer work once the password had been changed and after some time (a few days perhaps).