When you follow the new 'forgot password' workflow, you eventually get a message that says:

Reset Password
Your new password is on the way!

Instead, it should say:

Reset Password
An email message is on the way! It contains a unique, random URL. Click the link in the email message or copy it to your browser address bar. The link leads to a page where you can choose your new password.