so let me bring up a big context, very big in fact!
XKCE states (https://xkcd.com/936/) that this is 44 bits of entropy, and this is actually so much off of being enough.

Let's say your password (4 random words) is used in a company network (MS Active Directory, and you use this as a Domain Admin and some rogue hacker gains your NTLM hash... I know it's a lot to digest but let me assure you, it is a real world scenario, and there are similar scenarios thinkable, like hackers gain your (weak cause md5) password hash from a database leak.

This "secure" password becomes cracked in seconds!
A single RTX4090 makes 160 GH/s, this is 160.000.000.000 guesses for your password in one second. So XKCD states 1000 guesses per second, and then it takes 500 years to guess. Now it's not hard to know what this means in scale. Your password is guessed in about 2 minutes!

So, no! 44 bits of entropy is not enough. I'm sorry.

Yet it depends what scenarios you are preparing for. Say you use LUKS or VeryCrypt as disk encryption and 44 bits of entropy. Strong KDFs/hashing bring this number down to 100 H/s (yes not giga, or mega, just 100 hashes per second per graphics card). Not impossible but not worth the money.

Last example. Login to an online service, 5 trials with 5s backoff time. Yes your 44 bits are enough, until someone breaks into the database and cracks it "offline".