The dangerous ones are these misguided IT departments.

I bet they also have many other great ideas and processes that are strangling efficiency and preventing innovation.

Of course it's a balance, but think of the wasted productivity from a 2 minute timeout with stupid password requirements like that. That incurs a cost.