Until someone gets ahold of a list of the hashed passwords and can brute force them at home without triggering the lockout.