Hi

I think it would be useful to reuse this module (which I understand is a backport from D7) to send a confirmation mail when the user changes their password so they need to click in the link of that email to confirm the change, same way that Email Change confirmation works