Is it just me or this is a very stupid idea?

I did some very quick arithmetics following the instructions given by the creators of this card, and it seems to me that the card holds < 3000 password possibilities (ONLY!).

These guys are advising users to use strings around 8 (let's think 6-10) consecutive characters (top-bottom, bottom-top, left-right, right-left and diagonals) as passwords.

I think this technique would increase the possibilities of brute-forcing a password by several degrees of magnitude.

Am I missing something?