I think many are building applications based on the fact that the withdrawal credentials can’t be rotated dynamically.
I’d say a one time rotation is preferable.
Change on block proposal will not be intuitive for users, it could take weeks between block proposals… if you manage several validators that’s a bigger headache.