I definitely see this as a risk but it could be handled by messaging in the email or on the registration view like “Your magic link will log you in on the device you open it with, don’t share this with anyone”.
I haven’t seen any more sophisticated solutions to this in the wild but I’d be interested if you have 
