Currently, staff users can change passwords or permissions for any other user if they have the "superlibrarian" (Access to all librarian functions) or "staffaccess" (Allow staff members to modify permissions, usernames, and passwords for other staff members) permission. However, the patron import tool blocks password changes to any patron categories using the "Staff" category type, regardless of the tool user's permission level. It would make sense for the tool to allow password changes to all accounts for at least superlibrarians, possibly also for "staffaccess" permissions. A use case would be a superlibrarian who "rotates" passwords on a regular basis for staff security.
However... this has broad security implications for accidentally locking out all staff at once. And with the ability to enforce password expiration and complex passwords through patron categories, this may be a feature that is unnecessary in the patron import tool. Because of this, I suggest it be discussed by the community before action is taken.
See Bug 41776 for the documentation need of how patron import currently handles staff passwords.