As @Ddmr Ddmr rightfully stated it's important to have a signed bitcoin message and also I would not totally agree with continuous change of password. If you can just have a strong quality password you would be fine
yes... I think having strong password + staked address is better than changing password regularly
however one should change his password if he hasn't done it since dbhack in 2015
I do not think most of the hacks we're done through Brite forcing into the accounts.
agree... I'm pretty sure most accounts were hacked by compromising the computer thru various ways
brute forcing username/password would take too much time and resources