According to the OP article, the server side iterations are ineffective for adding security in bitwarden, so you need 600,000 on the client. This would not be the case if the design was correct.

(I'm not a security expert, so I'm going by the article)

The whole point of the linked article is that the due to a BitWarden design flaw the server iterations are meaningless — only the client iterations count.