As we put some polish on our Drupal 8 install profile, we're already in a position of technical debt: we've already launched Drupal 8 sites using the Drupal "standard" profile. Unless we update those sites to use our new D8 profile, they'll miss out on the benefits of our continuous deployment stack. There are plenty of resources for switching Drupal 7 site profiles, but what's the analogous process in Drupal 8?
Why is it so hard for users to change their passwords in Drupal? Inspired by a discussion on drupal.org, we took a quick survey of Alexa's highest-trafficked websites to discover design patterns for a better account management UX.