You were saying the input size doesn’t matter because you only store the hash which is always the same size. What I’m saying is that the input size really does matter.

You absolutely should set upper limits on all input fields because it will be abused if you don’t. Systems should validate their inputs, passwords included