Security v usability: cracking the workplace password problem (theguardian.com)

I'm not an expert, but isn't the advice in this article wrong?