@csteipp suggested at T68699#696077 (part of T68699: Increase "remember me" login cookie expiry from 30 days to 1 year on Wikimedia wikis):
My initial reaction is that for privileged accounts, 1 year sounds excessive. But for normal accounts, this should be fine.
When we're able to implement password length and https requirements per use group, we may also customize this.
He did okay rolling out the current version of the change, but this is a future potential customization.