By bruteforcing into the wild? What are ypu referring to?
In some cases password (private key) as sole and sufficient method to have full control over asset, executable by anyone is a problem not a benefit.
You can't just login to paypal from another IP. You can't just login into most emails these days ( 2FA)
Crypto wallets have none of those protections.
Other than that:
EOS (dPoS) reversed transactions multiple times while being top 10 at the time: https://cointelegraph.com/news/eos-reverses-previously-confi...
Ethereum Classic was attacked multiple times with chain reversing double spends due to not enough energy being committed to immutability: https://www.coindesk.com/ethereum-classic-attacker-successfu...
Ethereum reversed the "DAO hack" with a hard fork.
Which is simply not true, there at least 100 Wallets just in the Android Store. You think none of them has some kind of additional protection?
In some cases password (private key) as sole and sufficient method to have full control over asset, executable by anyone is a problem not a benefit.