... for one account. It takes N times as many more resources to do that for N more accounts. The attacks are impractically expensive for most attackers.