The password-reset well-known endpoint is used by password managers to show a "Change password..." button in their interface, which magically links to the password change page described in that well-known file.
If the website implements it. What about email preferences? Removing account links? There are many use-cases you might want to redirect a user to, but having to make their own well known for it seems dumb instead of using a more generic one.
Discord domain verification can tell in their onboarding docs to put it anywhere. It being well known does nothing.
Let's stop polluting the root of a domain!
[1] https://llmstxt.org/