When changing language or time zone under “Your profile” one is asked to confirm the current password. This is one of the very few locations where the password is asked for and while it may make sense for e-mail and password changes, language and time zone are more inconsequential (especially compared to what an admin account can do to a shop without ever being asked for a password)