Reset exists to let a user in without the credential. That makes it an alternative route to everything.
An upgrade broke the login, a consumer reported it twice, and applicants heard nothing for three months. Two regulators penalised two different failures.