[jerf]

If the person you describe really is doing that for all their passwords, then they are correct. Their password store is more secure than a password manager by nearly every metric that counts.

The one thing I would ding that approach on is recoverability, though. If a fire burns that down, it's gone.