Comment by datadrivenangel

10 hours ago

Does having to refresh the key every 6 weeks instead of every year or whatever actually make a meaningful difference security-wise?

If the key becomes compromised, rotating the key sooner means you potentially limit the damage from unauthorised access.