Hi,
If its readonly user then yes - they cannot change password as System Dashboard isn't available for readonly users.
If they are Readwrite or another Admin Role Users then they can change the passwords.
If User needs to change password for "readonly" users too then -- I would say its a feature request.
Thanks,
Suchitra