Does it still use a ridiculously low number of iterations of a KDF that is neither time- nor memory-hard for deriving symmetric keys from passphrases?
https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=blob;...
So it depends on the hardware it is run on, and has a lower limit as well.