If everyone in the office wrote down their secure password and stored it in a locked desk drawer, that's probably more secure than the entire office using weak

If everyone in the office wrote down their secure password and stored it in a locked desk drawer, that's probably more secure than the entire office using weak passwords. If nothing else, it means the person has to have physical access and be able to pass off rifling through someones desk after breaking it open. While this sort of stuff has happened in on-premise pentests, it's certainly not the normal way to attack when it's done for real.