Thread:Project:Current issues/reset password page falsely states it sent a password, given blank username

I was very confused by the behavior of the password reset page at

https://www.mediawiki.org/wiki/Special:PasswordReset

when I entered a blank Username and the my email address (or any text with an "@"). The response is:

Reset password A password reset email has been sent.

but I get nothing, and of course it can't be true when the email address has a nonexistant domain name like xyzzy@abc