Imagine an unlocked computer. This computer is logged on to an online service. And this service allows changing passwords without asking for the current one.