Password Reset Form?

Hi everyone –
I have a client who wants to create a password reset form for logged-in users. This is in addition to the standard Lost Password? link.

A couple of questions:
1) Any suggested methods? I found this tutorial using Gravity Forms that looks promising: http://blog.avirtualhome.com/edit-user-profile-with-gravity-forms/

2) Is this a security issue? I googled and didn’t see any articles about this, so not sure if it’s just not something people are looking for, or if it’s a security concern?

Many thanks,
Anne