That’s usually how PW resets work. Don’t use a @me.com or work addy and have a recovery method for whatever account you DO use and you’re good.