Seems like Apple completely ignored that inside a country the first three digits are guessable and the hashed string has a defined length, which makes hash cracking a lot easier.