Any code can be brute forced if you have a century to spare and enough computing to throw at it.

Which is why my bank card is blocked after three failed attempts.