Password change is not notified to the account owner if its made from the account settings. This is very crucial as once the account is compromised, the attacker can change the password without giving any clue to the victim.
Steps to reproduce the issue:
Can be reproducible with all valid accounts.
Password changed via the forgot password reset flows are notified while this notification is missing.