My only objection to this, is well for example, I helped manage a small eCommerce business and we weren't developers or in charge of the code. If a bug like that appeared, someone would have to tell us, and then we'd have to ask our development company to bill us for support to fix that bug. So it cost a support staff to field the email, coordination with the development company, and then billing, when, In this particular scenario, affects maybe 1/6000 people. I can say for certain we had the same issue on our software, and over 7 years never had a customer bring it to our attention. I found it by accident, it may have been possible that customers had the issue but forgot their password anyway, so we reset them for the customer. You could say "yeah this would save support staff time" but support staff fields these issues regularly for a dozen other reasons anyway, it's still easier/cheaper than coordinating with the software company, because they usually bill a few $100/hour.

This is just one of many issues that appear like this XD