the whole "not being an automatable remote sql injection away from everything" quality of physical objects grants a filing cabinet a tremendous amount of inherent security compared to anything digital.
Nothing says “we’re watching you” like the wifi password at the hotel I stayed at in Shanghai being my passport number.
Much like that old quip about the bandwidth of a vehicle full of tapes: "Never underestimate the at-rest security of a room full of filing cabinets."
Friction and delay have always been aspects of security.