It might be a lot closer if they were using argon2 instead of sha. Sha is a kind of bad choice for this sort of thinh.