Is keeping a plaintext password file worse than forcing users to use a password that's easy to type and encouraging them to use the same password everywhere?

It only stops the pasting, not the copying.