@ryanc I mean, I think some sites have explicitly their login method and no longer bother with having you set a password.
I find that password more convenient most of the time (and it avoids various possible email snafus or delays), but clearly it isn't securing much if it can be reset in that way.