Laphroaig seems to have upgraded their backend, and the first login after the push requires a password reset. Annoying but whatever.
So I try to log in with my old password, and it automatically sends a reset email.
But it's not a reset email, it's a random password in plain text.
So orders of magnitude less secure than what I had before they started messing around.
Incredible.