The article addresses this point.
This change is justified by the fact that a user can simply log out and view another user’s posts anyway. Except that’s not entirely true. Since Elon Musk took over the site, being logged out of X makes it very hard to view a user’s profile, individual posts are viewable but viewing an account triggers a log in pop up.
So technically it is possible for a logged out user to view your tweets but it’s a lot more inconvenient. Anything you can do to make it not worth their while helps.
With this change they won’t even have to put any effort anymore to stalk your content on X.
Nope, don’t rotate passwords. Just don’t. Best case scenario, you’re wasting your time; worst case, people will actually make their passwords less secure by rotating them, e.g. some people would happily change “password123” to “password1” and call it a day.
Just pick a looong password once, make sure you don’t reuse it elsewhere, and you’ll be fine.
This is as per the NIST latest guidelines.