The real weakness is because iOS default / suggested passphrases aren't very secure: "As the hotspot wordlist consists of only 1842 entries followed by a four-digit number, there are only around 18.5 million possible combinations."