Here is some initial conversation that happened in regards to this ticket: https://wikimedia.slack.com/archives/CDG6XHT3Q/p1592851460421300.

@dom_walden This code only affects a test in WatchedItemStoreIntegrationTest.php (https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/core/+/097c6b575d44848f6531a84c5556a7ca2ab507a7/tests/phpunit/includes/watcheditem/WatchedItemStoreIntegrationTest.php#198).

@dom_walden Thanks! I see where the problem is.

The specifications in this ticket have been implemented. Please note that there was a loophole in the code. The logic that checks for the $wgRateLimit has been moved above the Enhanced Password Reset check so it is possible to keep the Action throttle message if we wanted to. By moving the mailpasswordlogic, we avoid the possibility of disclosing any private information if we decided to keep and trigger the Action throttle message. The users would see the throttle message whether they have enabled PRU or not.

In T249730#6047602, @ifried wrote:

@dom_walden I'm unable to reproduce the issue when I test. I keep on seeing the informational screen in all cases, whether the account has Enhanced Password Reset enabled. Any tips on how to reproduce this? Thanks!

In T245079#5935344, @gerritbot wrote:

Change 576166 had a related patch set uploaded (by HMonroy; owner: HMonroy):
[mediawiki/core@master] Add check to api that filters out expired watchlist items

https://gerrit.wikimedia.org/r/576166