Password reset is really messed up

[ArkhamNative]

I often use a VPN (whose machines are located in multiple countries) and, when I turn it off, I get almost every time an email from SE to change my password even if I use the security token :-(

That's the best news I've read all week.
People logging in from different countries is such an obvious red flag.