Wouldn't anyone intercepting the email be able to use the reset link themselves and gain access to the account?
Providers should send you notifications when you reset your password, they generally don't when you just log-in like normal.
Wouldn't anyone intercepting the email be able to use the reset link themselves and gain access to the account?