ymf, and assisted by the ever-helpful testing of ymf and lacey, the information on validation in FAQ 17: Lost Username or Lost Password has changed.*Lost username or lost password emails can always be sent to the email address currently listed on the account, regardless of validation.
*The link in the lost password email can always be used to change the lost password to a random password, no matter whether the current email address is validated or unvalidated.
*The random password cannot be changed to a user-selected password unless the current address is validated.