One can hide the "Change password" button in Special:Preferences with this right, i.e.
$wgRevokePermissions['generic']['editmyprivateinfo'] = true;
I would like to add this to the description. However, as @Dylsss pointed out in this support topic, the password could still be changed using Special:ChangeCredentials. So this caveat should be mentioned so people don't misunderstand this as actually preventing a user password change. Adding the caveat here would make for a long-ish explanation that might be more than should be used for a mediawiki namespace page. A compromise would be if there was a different page that the password part could link to that explained this more fully. I wasn't able to find such a page. Also, it would be better if there was simply a right that would prevent a user password change, rather than lumping this in with other private info, but I don't understand enough about the rights structure and philosophy behind it to know if that would be a reasonable suggestion. What do others think about this?
Topic on MediaWiki talk:Right-editmyprivateinfo
Added this info to manual page as https://www.mediawiki.org/w/index.php?title=Manual%3AUser_rights&type=revision&diff=5059000&oldid=5038874. Also flagged it with @Bawolff to see if there is a better way.
I would suggest changing this in git (in language/i18n/en.json)
I can do that. Do you think the wording I used in https://www.mediawiki.org/w/index.php?title=Manual%3AUser_rights&type=revision&diff=5059000&oldid=5038874 would be good?