I work in QA, my colleague is exactly this guy. Breaks everything without even trying. Doesn’t even have much of an IT background, but man he’s good at breaking things.

Also, online logins should lock you out temporarily after a few failed attempts anyway, making brute force a complete non issue.

Also also, if you’re going to try to brute force someones pw, you would just look up the requirements beforehand anyway.