[defanor]

> And people who don’t want to share their email can use a temp email service, so it’s no skin off their back.

That seems to be a better option for bots than for actual users: if you care about the account, you probably would not want to make its password resettable via a service like that. Or even via a regular email provider you do not trust, and those could easily be the only kind available.