[dathinab]

But in a certain way this thinks are aspects of the magic wormhole CLI not the underlying tech.

It should be trivial to increase security on failed attempts or use a higher default security for an GUI frontend.

The CLI is clearly meant for somewhat technical versatile users (I mean it's a CLI) so I think it's normal to do some aprons when targeting other user groups. E.g. adding explanations over some aspects atonal to the thinks I already mentioned is quite doable for a GUI.