This is reported by me a while ago, just making sure it's on your radar.
When you decide to reset your profile and password due to a concern that the profile might have been leaked, by generating the new profile you are NOT blocking your old profile from being used.
This is a serious security issue. It is rather easy to fix.
I believe that security comes first in security products and you should probably agree.
Thanks for the great feedback. I totally agree.
This bug fix will be available in next patch.