Agreed - frankly even 10 years should be green. Unless you’re talking about corporate/government security, no one is tying up a decade of GPU time to crack a single password, not to mention that even a relatively security lax person is likely to have changed their password some time in a decade