True, but I won’t put all the blame on Apple here. A good, random 30-char password would be impossible to crack even with thousands of attempts per second.