That sounds like an old problem that is not specific to Reddit. If your email is on any address leak from any website or is on a spammer’s list, and a site allows people to request password resets by email rather than username, someone is going to do it.
How they intend to read your email is anyone’s guess, however. I’ve gotten a few requests like this from other websites, but of course, the sites are always like “if you didn’t request this, please disregard this, and consider changing your password just in case”.
That sounds like an old problem that is not specific to Reddit. If your email is on any address leak from any website or is on a spammer’s list, and a site allows people to request password resets by email rather than username, someone is going to do it.
How they intend to read your email is anyone’s guess, however. I’ve gotten a few requests like this from other websites, but of course, the sites are always like “if you didn’t request this, please disregard this, and consider changing your password just in case”.