My new most favorite way of being annoying: asking "what is the threat model that led to this security decision?".
I'm expecting, nay hoping, to be asked that for my own projects now.
@liw That is the question I always ask when confronted with mandatory password changes very few months.
Lars and friends