Is possible to force reset a password without going through and email flow ?

Only if the user is already logged in, you can use the

.update({ password: new_password })

method

I see, there is no way to reset the password otherwise ?

Unfortunately I don't do mobile app development so can't help much here

You know anyone who might be able to give some clarity on this ? Ideally I want to keep everything in the app itself

No one comes to mind, but maybe change the question to include mobile app in it as its quite broad at the moment and you have a specific use case.