Constantly forcing password changes pushes people toward predictable patterns like adding a number at the end. Modern guidance favors strong, unique passwords changed when there's an actual reason — like a breach — not on an arbitrary schedule.
“Change passwords when compromised, not just because it's Tuesday.”