Ok, preimage resistance is still pretty strong, but it has been reduced enough that I wouldn't trust it remaining above practical attacks beyond the next decade.

If you use the same password on different sites despite password managers and now passkeys you are asking for it.