Choosing how a signer proves who they are

Email link, access code, or in person — what each one actually establishes, and when the weakest is the right choice.