Password reset cannot be enabled/disabled independently of password change
I tried to enable password changes for users. Doing so, password resets were also enabled, and it seems there is no option to disable password resets separately.
Password resets pose a criticial security risk if not done exactly right and strictly ensuring e-mail address validity, so they should be available separately.