> Or they could create 1000 users in a row with 4GB passwords and fill up your storage. Not an issue if you’re storing passwords properly. You don’t store the

> Or they could create 1000 users in a row with 4GB passwords and fill up your storage. Not an issue if you’re storing passwords properly. You don’t store the actual password, you store a (hopefully) salted hash of it.