I was going to reinstall soon anyways, because I wanted to use full disk encryption. If the whole asking-to-change-password thing is just a random bug or a malicious activity, the reinstall would take care of that. But if it is a design choice or a common issue with either debian or GNOME (that can not easily be fixed), I might reconsider my choice of distro and desktop-environment, before doing the reinstall. I will wait a bit to see if anyone can identify the issue
Doesn’t work with javascript disabled.