There are some maths in it which will answer your question about „time & effort“ to bruteforce a Cryptomator encrypted vault.
PS: from my experience the statements in this Board are also for „non pro users“ always honest.
So what do you want to say with this hint?
I find this very presumptuous as it suggests “non-pro users” would be treated differently. That is not the case.