The reset form sends a link to an email address held on the account. An address is optional here, and some accounts have none, so for those the form does nothing at all. Nothing is broken. There is simply nowhere for the link to go.
The way back in is a person, not a form.
Expect to be asked something only the account holder would know. A password is never reset on a request that cannot be tied to the person whose figures are behind it.
The replacement password is temporary and handed over privately. The portal then requires a new one of your own at the first sign-in, so the temporary password is dead the moment it is used.
Adding an email address on the Account page afterwards makes the next time self-service. It is used for report notices, message alerts and password recovery, and for nothing else.
There is no automatic route back into an account without proving who you are, and there will not be one. Any form that could reset an account on its own would put one client's private figures behind whatever a stranger could type into it.