If the link allows you to pick a new password without knowing your current password, anyone who intercepts the email with the link would also get full access using the new password.