every combination doesn’t need to be tried ... only until you get a hit ...
Fair. But even if statistically, just 1/1000 of combinations is tried before the password is found, it would still take years. The brute force pwd cracking scheme would only work in a scenario of no latency and unlimited tries authorized. Not at all realistic and not worth doing.