Comment by amir734jj

You are basically saying sha256 is prune to attack. As long as they salt the password, it should be fine.