Slowness as a quality

To hash a password, functions such as bcrypt or Argon2 are recommended, deliberately slow (for example 0.1 s per computation), instead of the very fast SHA-256.

Explain why this slowness is a quality here and not a flaw. Your explanation must distinguish the impact on the legitimate user from the impact on the attacker.