Sure, scrypt would be much better than pbkdf2 here. But that's still no reason to not take a 200x increase in cracking cost; no matter how fast your adversary'

Sure, scrypt would be much better than pbkdf2 here. But that's still no reason to not take a 200x increase in cracking cost; no matter how fast your adversary's ASICs are, there's a range of passphrase complexity where it will matter.