Sounds like a bad advice in general. For the cloudflare CTO it would sound a lot better to hear something like: "Whille I don't think anyone needs to change their password, but I changed mine, I actually do it regularly, to keep my accounts safe." Unfortunatly it would not give such a good sound bite.