I don't think it's about security. It's about fobing off password resets on somebody else.