Unauthenticated task forms are sent to external user email with a static url token. This could be compromised if someone else gets hold of the url.
Can we add another level of security to send OTP to the same external email once someone tries to use the task form url? This dynamic otp generation could help make these form urls more secure. This could be a toggle feature for unauthenticated forms.