Comment by Sayuj01

You are absolutely wrong on the storage claim, the server runs proper PBKDF2-SHA256 with 100k iterations and a random salt, so that part is solid.