[jtreminio]

If you had to wait 10 minutes to login to a website every time, you'd very quickly stop bothering to log in.

[viscanti]

You'd rule out all the legitimate users and only be left with people trying to break in. That strategy would only work on a honey-pot site.