3 ms·

Physical devices, like Yubikeys and iPhones, have rate limited PINs. It’s not enough just to steal a device.