From the point of view of somebody brute forcing their way in, there is very little difference between a password that stays the same and one that changes all the time.

Those are great against key-loggers, not so against people that have insider info.