make no-bruteforce the default

[MrMatch246]

Please Describe The Problem To Be Solved
Please make the -no-bruteforce flag set by default or turn it into a --bruteforce flag that when set does bruteforce

(Optional): Suggest A Solution
If that isnt appreciated, at least disable the auto bruteforce behaviour when using -id all as this semantically means:
use all proven valid user : password combinations stored in the db.
I do not assume that this would try to bruteforce anything, in contrast to this, it IS plausible that supplying two lists for users and passwords would do that.

[NeffIsBack]

Duplicate to #854

Probably a good idea tho, as discussed in the issue.