Seems like it'd paint you into a bit of a corner if you ever needed to change anything about your password hashing. Say some mythical unbreakable hash algorith

Seems like it'd paint you into a bit of a corner if you ever needed to change anything about your password hashing. Say some mythical unbreakable hash algorithm comes along that's O(1) and you decide you want to move to it, you're forever going to have to drag along these terabytes of junk hashes as you're entire userbase wont log in (giving you the opertunity to change how their password is stored) and since you can't tell the noise from the signal you'll forever have that enormous table of hashes from that time you tried to be extra clever. I'll leave crypto to the experts :)