This reminds me of the time I worked at this company where IT enforced all passwords (email, laptop, AWS, etc) to be changed every month. Every time I got the prompt I would send them a study showing how this was actually making security worse.

I got the HR complain after 4 times I think :)