Forcing password reset on all Amazon customers will cost them $10s of millions, possibly more. If I were them I'd consider every possible alternative before doing that.