If math is STO then I would argue passwords are also STO.

It's only secure until someone figures it out.