Depends on the implementation, at $WORK we have similar mechanism but the links clicked in the email do what's called a partial login that gives basic access to some closed pages but still needs authentication to access or change account details. We have this exactly because people forward emails and such.
