I would say an online password manager is more of a risk than an IRL paper in a safe place. The best security is a locally stored password database with 2 factor.