Hello Malte,
Yes that is a problem specially when sometimes for some reason the mail server doesnt send email and you push forgot your password link, there is no way to go in again unless you ask to a SWA to update it again..
Maybe it would be good to have another field to store the plain password and send it by email when a user request it (when the parameter is turned on)..