They do, but does it matter? Ten core-years is not a forbidding threshold.
Not really - it does make a difference between amateur attackers and professional, but the potential value is high enough that there will probably be plenty of well funded attackers.