1) Making public information about how he created his cold wallet, or how it is stored, or where it is stored reduces his security.
Security through obscurity is not security.
Passwords are security through obscurity, so yes, it is.
A password by itself is useless - you need the associated login name.