I discovered what the problem was - a silly javascript error. For the benefit of others, make sure that when you’re importing Auth0Passwordless from ‘auth0-lock’, you’re importing it with curly braces as:
import { Auth0Passwordless } from 'auth0-lock'