Most sites don't have those anyway. I think the biggest security differential is the fact that a compromised password reset generally is harder to hide, becaus

Most sites don't have those anyway. I think the biggest security differential is the fact that a compromised password reset generally is harder to hide, because the attacker cannot replicate the original token.