True but then rainbow tables are much, much more effective. Instead of looking for one value, you could potentially be looking for very many that you know produce the same output due to a collision attack. MD5 is a joke these days, look at that as an example.