The article does a pretty good job of making this argument, including your (and my initial!) question about why not to just use password managers.