Those both appear to be legitimate Roku emails. They did update their privacy policy recently. And many bot services, such as a password reset, come from unmonitored mailboxes. So the noreply is normal.
Dan
Roku Community Streaming Expert
Help others find this answer and click "Accept as Solution."
If you appreciate my answer, maybe give me a Kudo.
I am not a Roku employee, just another user.