How does locking a account after failed attempts to access it make sense? By failing to access the account I have proved nothing besides that I know a username

How does locking a account after failed attempts to access it make sense? By failing to access the account I have proved nothing besides that I know a username (which is usually not secret).