So, what's the practical alternative?

I don't doubt what you're saying, but KeePass is still better than what probably 95% of users are doing for password creation/security.

Risk is never completely eliminated - it is minimized and mitigated. Login to read more.