it took NIST a decade to realize that constantly making users change passwords for no other reason but the wall clock changed increased the use of insecure password practices.

It is indeed a world of reality vs what sounds good on paper.