It would be super cool if they did more work to prevent brute force account takeovers.