Is there any reason NOT to set the number of iterations/hashes as high as reasonable by default? From an end-user standpoint, it might take an extra second or t

Is there any reason NOT to set the number of iterations/hashes as high as reasonable by default? From an end-user standpoint, it might take an extra second or two vs 0.1 seconds, but then you've increased the brute force time needed by ten. The most efficient way to brute force "Horse Gone Barn Bolted" would be with a minimal dictionary attack, say the most common 2000 words, plus s ed *ing variants. you're still looking at 1+ quadrillion combinations for that password, not including spaces. That can't be that fast assuming a slower hashing algorithm, right? -non crypto person's wild guess