I'll forgo a mathematical argument in favor of a practical one.  If you have a choice between offloading complexity to your users or your developers, you should choose your developers every time.  Rather that requiring complex password schemes from your users, have your developers use a slow hashing algorithm instead.