I don't have access to your current password, but I do have the possibilty to change it. I can summon your profile, as an admin, and your password box will appear empty to me; if I don't fill in anything new you'd keep your old password (which I never get to know) but I can make it anything I want. You would have a brand-new password and only I would know it. Isn't that evil.