Not exactly true for DES -- it is still way too cheap to crack. One
useful paper on the topic is
http://www.bsdcan.org/2009/schedule/attachments/87_scrypt.pdf
It discusses some of the possible attack vectors. IMO we should make the
Blowfish or SHA1 based cypher the default and not ask. The only case
where the cipher really matters (other than security against cracking)
is interoperability with !NetBSD systems. In that case it only matters
if you want to copy the encrypted password from master.passwd. I believe
you already know how to change the cipher algorithm if you want to do
something like that...
Joerg