In the Microsoft 365 admin center, for a given active user, I reset their password, making sure that I check the box labeled "Require this user to change their password when they first sign in". 
So far so good, now I go ahead and click the button to reset the password. I check user properties using the graph api (v1.0), using the endpoint https://graph.microsoft.com/v1.0/users?$select=displayName,passwordProfile
And as expected I see this:
But when I reset the password, and don't check the box to require the user to change their password, I get this in the graph api:
Am I missing something? passwordProfile is null by default, so why does it stay this way when the password is reset, why wouldn't it show "forceChangePasswordNextSignIn" as false instead?