The ability to remember a password or write down backup phrases really goes up when it’s not the access to facebook that can be lost but people’s own money.

At least when I was working in the area 10 years ago, most passwords were leaked via brute-force, phishing, or key logging trojans. The latter was far more common than you'd ever think, and also often harvested SSH private keys.