It’s not about the password itself. Many password reset systems use security questions. A common security question is what your favorite food is.

They don’t need to know your current password when they know the security answer to make a new password on their own.