I host with OVH and the only way to reset a password is with the email or the customer number which both send a reset link to the email address.

This isn't OVH's fault.

Also in the forum post...

"I asked OVH support to provide some additional information and restrict Manager access to my IP range."

This is already available.