@Jason Trommetter - Two-factor authentication is great, but in some ways it solves a different problem.

Yes, there are brute force attacks trying to break into existing accounts, but many I see are attempts at registering new accounts to post spam comments.

Plus, some of us run sites with many users where it would not be practical to force other means of authentication. For example, I have one site that uses bbPress for forums with thousands of non-technical users. bbPress accounts are just regular WordPress users. I do use two-factor authentication to protect my admin account, but that won't help with the masses with their logins. And those regular accounts do get attacked sometimes.