On balance, it's still better to use a password manager.
because the alternative is that *you* manage your passwords. And en masse, that is the worst possible outcome.
There's something about a lot (but thankfully not all) IT specialists that makes them require a far higher bar for IT security than they do for anything in the real world. I suspect it's so some of them can act the Bertie Big Bollocks at parties (maybe I'msour because I don't get invited to those sort of parties ?).
As long as your security is a single step ahead of the bad guys - who are either targeting a very small subset of high net worth accounts, or alternatively just trawling the masses - you'll be OK.
The real value of a password manager is to allow me to have 1,000+ unique gibberish passwords of eye watering entropy. Have I been pawned ? Do I care ?
Biting the hand that feeds IT
