My Profile — the page for managing your own login, in either the Controller or the account area — could turn on two-factor authentication and nothing else. There was no way to change your own email or password, and the first admin login, generated at install time, had no path to a personal one through the UI.
The fix was smaller than the gap suggested: the auth framework already supported profile and password updates, and the forms that would use them had never been built. So this shipped as two new sections on an existing page.
The password field also gained a “Generate” button — a plain generate-or-type field, the same shape account creation’s password field uses. Click it and both password fields fill with a random value you can see and copy before saving; ignore it and type your own. Verified by doing it: a new email and generated password were set, the old login was refused, and the new one worked.