He should have also considered the option of not loading third-party assets and analytics on password reset pages. I'm grumpy enough to suggest not loading the

He should have also considered the option of not loading third-party assets and analytics on password reset pages. I'm grumpy enough to suggest not loading them period, but I'm a curmudgeon.