3 ms·

Rather than force people to do an extra step, why not just use a secure method of generating reset IDs?