I bruteforced a 4-digit 2FA in 2 days, of course with the help of a small script instead of trying it myself. It's always fun to see dumb solutions work.
1) If brute force doesn't work, you're not using enough.
2) Do the stupid thing first.
"Use a bigger hammer". "If it jams, force it. If it breaks, it was going to break anyway".