lol will retract that, that is really bad bug on cloudflare side, but for sure the most dangerous way to reset passwords is by changing the salts, and obviously it will not be enough if actual passwords were leaked