There's a bit where he implies that if an encryption process doesn't take very long to execute on a smartphone, then it must be easy to crack the resulting file on a powerful server. Am I making a mistake here?
Scrypt can be held up as a very good choice for key stretching.