Isn't that the right thing to do for truly sensitive passwords?

I'd much rather transcribe my financial account passwords to paper, or not log in for a couple days than have multiple months where a vulnerability might be exploitable