Comment by out_of_protocol

1) That's a lot more entropy to gather, means sample size needs to be huge.

2) this also means check must be run against every user's ID in their database, 10^9 more expensive