In the very first step (https://accounts.firefox.com/reset_password) the user is informed about the password reset consequences, but that's also the last time. Thus a lot of cases are in the support forum, about data deleted when password has been reset. I suggest to add this information also to the confirmation e-mail, together with a link to cancel the password reset process, just for the users to make sure, nothing has been deleted yet. It should be there also for the case, when someone just filed my e-mail address in the form and I accidentally click on the big blue button in the e-mail, without being informed about the possible impact.
This is a thorny issue and I agree additional messaging can help here. FWIW, there is no data loss until you actually choose and submit your new password, i.e., just requesting a password reset email and even clicking on the link doesn't have any negative consequences.
Priority: -- → P2
You need to log in before you can comment on or make changes to this bug.