[zeveb]

He should have also considered the option of not loading third-party assets and analytics on password reset pages.

I'm grumpy enough to suggest not loading them period, but I'm a curmudgeon.