"Frequent changes also eat up an enormous amount of resources"
There are a handful of sites I use which now require 6 monthly password changes and I've given up trying to remember passwords/password variants for them so I just go through the "forgotten password" process everytime I need to log in.