Apart from shoulder-surfing wouldn't an encrypted spreadsheet be equivalent (not Excel, as I imagine MS might randomly send that data home, eg of there's a crash)?

In both cases once there's physical compromise, if they have the "master" password you're screwed?

I presume they use clipboards for the pasting, or do typing that could be captured bya keylogger.