By "massive papertrail" do you mean "a pair of emails to the associated address"?

No, a massive amount of CloudTrail logs.

Does it? Pretty sure that logging in as root generates one cloudtrail per action, regardless of whether or not you did it with a saved password or you reset the password. Resetting the password doesn't generate a cloudtrail event as far as I've seen.