I think that a login limiter to limit the number of allowed login attempts would be a more useful feature to add to core.