It is only a simple feature if you don't care about DOS against the user account and do not have an adversary with a large botnet.