People will still write their passwords on post-its - no matter what they do.
I think they are referring to a process some banks are now using. You have a password but also select an image from a bunch they give you.
Its the combination of the password and image that create the security. Trouble is the applications also use a cookie which save the image so all you have to do is type your simple password.
Does help keep others who don’t have your PC out. Plus they also track IPs and can control access based on it.