I’ve seen reports of people who haven’t tried to reset their password getting a reset notification, I bet the email issue Beehaw is having is exposing some buggy behavior in Lemmy’s notification system. The random email address “working” makes sense, as that email likely isn’t attached to a user, so the send function never gets hit. At the same time, to prevent enumeration attacks, Lemmy probably doesn’t have a motivation that says “That email address doesn’t exist”