Comment by damsalor

Certainly not in the mentioned 2fa scenario.

I would guess that simple rate limiting would do the trick for the rest