[moe]

You're missing the point. One attempt is enough when there's a pre-auth exploit.