To be fair, Microsoft very clearly have been telling everyone to stop ramming password rotation and composition requirements down their employees’ and users’ throats for some time now. Eg https://docs.microsoft.com/en-us/microsoft-365/admin/misc/password-policy-recommendations:

Don't require mandatory periodic password resets for user accounts

/

matigo.ca.