it makes brute-force intents from hackers much more costly in CPU in case they have their hands on your encrypted vault. Bitwarden past default settings were much too low and they've not updated old accounts