The only thing I can think of is it allows the user to realise if their account had been compromised because the password have been changed. But I agree with you.