Minor Forgot password reset code doesn't populate "_plain" fields (as kPasswordFormatter does) and this makes all code, that relies on that fail. For example when user changes it's password, then in OnAfterItemUpdate event we have plain (not encrypted) version of it's new password in "Password_plain" virtual field.
Forgot password reset code sets password directly to object and not uses the formatter at all.