Dangerous password procedure

When I entered only my email, I was forced to change my password. Ok, that's fine, something to do with safety I guess. So I went to my email, where I'm always automatically logged in, clicked the link in the mail. Here I was led to a page where I could fill in my new password, but without also asking to enter the old one! This is dangerous! 

If someone had access to my pc and only knew my emailadress, this person could have changed my password without me knowing! Please make this more safe and let people fill in their old password first somewhere in the process, at least once. 

Beside this. I find it strange that when a password auto-fill in can be made visible. This also is extremely dangerous. People can literally view your password, just by clicking on the eye.

I hope these things change quick. 

Nick