If a user has no email set, any mail entered for that username in the lost-password field will claim to have sent a mail (although it thankfully won't actually send it)