If I might make two quick suggestions...
1. I really like the old censor feature from Classic. Type in a word and it's get "starred out *****" regardless of whether someone adds any characters before or after it. Nice and simple, and does the job.
2. Forgotten passwords. Do the passwords have to change every time someone tries to retrieve them? What's the upside, security? The downside is that people sometimes type in other users' data just as a prank, so because of such jokers people end up having to access their email just to be able to log in again. Maybe allowing users to switch this off in the Member Profile would do the trick.
