Imagine an unlocked computer. This computer is logged on to an online service. And this service allows for changing passwords without asking for the current one: