@esther I don't think that's a hot take at all, or else forcing users to change their passwords monthly would still be considered a good practice