That is the same guy that wrote "They want us to be compliant, not secure" which was equally bad.

What is wrong with this blogpost:

* Posing as an authority, without any real credentials (so just rando ranting on the internet, writing that someone worked in "regulated area" is not convincing me)

* Stating whole "advice" as absolute truth without considering any other use cases, upsides

* Assuming "password manager" is synonymous with "cloud password manager" while presenting offline one at the begining

* Stating whole post as an absolute advice, if it would be titled "Way I am handling my password" or "My solution for passwords" I would have no problem with it

Biggest flaw is not considering any threat model and "security LARPing" while writing like it would come from an expert.