Brute forcing a password hash is a lot different from being able to trivially extract it from memory long after it's been used.