No, you put your finger on the elephant in the room. The "temporary password" is more like a yellow sticky note: it curls up and fall off your terminal after 3

No, you put your finger on the elephant in the room. The "temporary password" is more like a yellow sticky note: it curls up and fall off your terminal after 3 days, but you can still find it on your desk(top) if you look around. The scheme only works if the user did not write the password down and did not save a copy of the unencrypted document / web site.