@TessellatingHeckler Even if you take that into account, there's a big difference between 2^44 and 2^70. For a dictionary as small as 2048 words, it's going to take 2^44 tries to get a four-word password, similar to what a brute-force would be.
However, if the attackers would employ dictionary words separated by spaces, even then the second password would have ~2^70 guesses (roughly the amount of words in the English language to the power of 4) which is a lot more than the 2^44 guesses you'd get by brute-forcing.
> In 2007, the largest estimated proportion of HIV/AIDS diagnoses among adults and adolescents in the U.S. were men who have sex with men (MSM). While this category is only 2% of the U.S. population[26] they accounted for 53% of the overall diagnoses and 71% among men.[27] According to a 2010 federal study, one in five men who have sex with men are HIV positive and nearly half don't realize it.