how can that possibly work while supporting offline backup & restore?

The compute power needed use to be of the order of 5s per password try. So it effectively mitigate brute force back them, you need a absurd compute power to crack them.

Moore law did its thing, now you can do it with a lot less computer power.