> A support engineer being able to set a password on any account is unthinkable, there is zero chance this is actually the case

I have no idea what an Okta support engineer can or can't do but I know that a regular account administrator can set an arbitrary password for a given user via the Okta UI.