Yes, but being cryptographically broken is not matter, does it? First rule of computer security is any system is no more strong than its weakest link.

Relevant xkcd [1]: why worry about breaking advanced cryptography when you can just socially engineer the passphrase out of people?

[1] https://xkcd.com/538/