Your work stays. The plan, the journal and every review due are tied to the account, not to the password.
The link is short-lived. It works for an hour and once only — long enough to read the email, short enough to matter if it goes astray.
Other devices sign out. Resetting closes every open session. A reset happens when an account might have been taken.