If a user types in a e-mail into the password form the form returns if the e-mail is found in the system or not. Even tho the form is rate-limited it can be used to enumerate a list of valid accounts for further brute-force or phishing attack vectors.
A generic check your e-mail account for reset instructions would be better in my opinion.