Should any systems exist in reality where a hacker can brute force a password.
Surely the number of retries and limits on their frequency ?
Add cooling off periods FTW too.

A real human can only type so fast and such.