I just checked and this appears to be for accounts of any vintage. If you go here:
https://twitter.com/settings/security
Turn on "password reset protect" and it will require "either the phone number or email address associated with your account in order to reset your password". I'm not sure it adds a ton of security, but it definitely cuts down on the password reset emails.