I was thinking the same thing. This isn't really a viable scam unless maybe Netflix offers multiple ways to reset your password, which isn't addressed in the article. Maybe a text message reset is possible?