> It's essentially impossible to reverse the hashed password.

It’s essentially a nontrivial unit of work to brute force the hash (or exploit collisions for a compromised hashing algo). That’s not impossible but it’s important not to overstate its safety too.

... for one account. It takes N times as many more resources to do that for N more accounts. The attacks are impractically expensive for most attackers.