>No, it is never okay to compromise security just because "it's good when you forget your password".

No one is arguing that.