I said password for the private key, not the private key itself. I store my PKs in KeePass databases with a crazy number of rounds, so each password guess attempt takes 2-3 seconds on a modern CPU. Good luck bruteforcing that.