So in the newest version, a password reset send an cc to all moderators. Is there any way to prevent that?

It is only sent to administratrs with ADMIN rights, so just remove that right from those who should not get the email

Hmm ok. But there appears to be another bug. Another admin tried to reset her password. In the reset email it does say her username right "from a user who tried to log in as sophia."

but the reset link shows my username (the master account). So essentially whenever any admin tries to reset, they get a chance to reset the master account.

It is all working correctly when I try it.