I think this is the sign of today. Many corporations have this kind of or more severe protection systems. The reality of attacks on corporations systems indeed happen. If the system is vital, you would have a prompt every 30 days to change the password.
Just life these days, I think.