This morning, somewhere in the world, an employee rotated his password. From Summer2025! to Autumn2025!. There was a small dopamine pulse, a feeling of duty discharged, and he went on with his day. His IT department logged it. A compliance officer can now tick a box stating that the organisation rotates passwords. Everyone is satisfied.
Nobody is safer.