Yes, it’s secure. It’s using WordPress functionality for Login and Register and our team is constantly updating the plugin so there shouldn’t be any vulnerabilities.
You can also enable brute force protection and it will ban users that are trying to hack magic link login form.