Or the variables are terribly named

Boho sort is O(1) in the best case scenario

Not even then. Brute force cracking programs don't rely on the server to indicate if the attempted password is correct.

No, it just means you have to type in the correct password twice in a row.