I'd suggest you rename this method, as it's not validating but rather returning a boolean. Maybe name it is_password_reset_too_soon (and change the logic in the calls to the method as that would make it opposite).