Yes and no.
You can easily access and modify CustomizationUser.Password property, and it seems to make the most sense to do in the _CanLogIn subfunction.
However you can't detect when the password was last updated.
CustomizationUser.Updated is the 'last change' date for the record. You'd have to assume this was password changes, but in reality it could be name, email or telephone details.