Well! That didn't take long!

Reset accounts are disabled.

I say we test and enable them.

This is now a witness issue.

Conclusion

We should obviously enable this feature.
It allows accounts to be recovered even when the keys are lost.
It also adds a new attack vector to steal accounts that haven't transacted in 60 days.
We should tread carefully.