True in some points. Password rotation is bad. But isn't it better to rotate a bad password than keeping a bad password?

Furthermore if you have a internal system, the administrator should enforce certainly password conditions. They could even forbid the use of old passwords...