The card number is 14 digits, none of which relate to my phone number, account number, or even area code. I have trouble reading it from 12 inches away, and I doubt it's possible to read over someone's shoulder. I suspect almost everyone can answer both questions correctly. But I have only one phone and one office, and neither number has changed for years. I have accounts on about ten computers, with a different password on each.
Passwords sometimes change as often as monthly.
However, the only ones I write down are those that I cannot set myself. It isn't difficult to think of passwords that is easy to remember but hard to guess. Run two words together, or use the initials of some phrase, or misspell some word or name. Of course you should never have the same password on two machines. Another password risk is terminal programs which offer to remember your password for you.