One secure dynamic password to rule them all

So if the message containing the password is intercepted, an attacker now has a very small dictionary to use to gain access to all of your accounts tied to hopr? Color me skeptical.