Yes, for master passwords that you actually have to memorize, fewer random words are sufficient. Also because there are other methods against brute force hacking, for example, built-in entry counts, haptic interfaces, physical 2fa sticks.