I received an email telling me that someone requested a password reset for my Apple ID.

Dear ___,

You recently made a request to reset your password or unlock your Apple ID. Please click the link below to continue.

Reset Password or Unlock Apple ID >

If you did not make this change or you believe an unauthorised person has accessed your account, go to iforgot.apple.com to reset your password without delay. Following this, sign into your Apple ID account page at https://appleid.apple.com/gb to review and update your security settings.

Sincerely,

Apple Support

The part highlighted in bold seems to be saying that I should reset my password. Why?

Here is my general understanding of password reset procedures:

1. Someone requests a password reset (any person can do this for any account)

2. An email containing next steps is sent to the account holder's email

3. The email from step 2 is required to actually perform the password reset

Therefore, unless my email is compromised (which I have no reason to believe), there is no reason to think my Apple ID is at risk, based on the information provided so far. Right?

I also asked @AppleSupport about it on Twitter:

And so they said:

If you did not request this change, for security reasons, update your password.

Given that anyone on the internet can request a password reset for any account, and given that to do so is futile without access to the account holder's email, what security reasons could Apple possibly talking about?

An example of why I think this could be a silly suggestion, let us suppose somebody wanted to annoy somebody else: all he would need to do is send repeated password reset requests. Should the recipient then feel obligated to change his password each time, "for security reasons"?

So, why is Apple saying that I should change my password? And if the answer is "security reasons", what are some examples?

I received an email telling me that someone requested a password reset for my Apple ID.

Dear ___,

You recently made a request to reset your password or unlock your Apple ID. Please click the link below to continue.

Reset Password or Unlock Apple ID >

If you did not make this change or you believe an unauthorised person has accessed your account, go to iforgot.apple.com to reset your password without delay. Following this, sign into your Apple ID account page at https://appleid.apple.com/gb to review and update your security settings.

Sincerely,

Apple Support

The part highlighted in bold seems to be saying that I should reset my password. Why?

Here is my general understanding of password reset procedures:

1. Someone requests a password reset (any person can do this for any account)

2. An email containing next steps is sent to the account holder's email

3. The email from step 2 is required to actually perform the password reset

Therefore, unless my email is compromised (which I have no reason to believe), there is no reason to think my Apple ID is at risk, based on the information provided so far. Right?

I also asked @AppleSupport about it on Twitter:

And so they said:

If you did not request this change, for security reasons, update your password.

Given that anyone on the internet can request a password reset for any account, and given that to do so is futile without access to the account holder's email, what security reasons could Apple possibly talking about?

An example of why I think this could be a silly suggestion, let us suppose somebody wanted to annoy somebody else: all he would need to do is send repeated password reset requests. Should the recipient then feel obligated to change his password each time, "for security reasons"?

So, why is Apple saying that I should change my password? And if the answer is "security reasons", what are some examples?