Comment by stetrain

I get the idea. If email links are secure enough to use for password resets, just do that every time. Then you eliminate a whole category of password attacks.

But it’s definitely annoying for a frequently used service.