[harshreality]

Nope, what typically happens is the account gets locked out and requires a confirmation sent to the account's email address to unlock it.

[samegreatsleeve]

So a soft DOS then. Not much of a solution, still fully exploitable.