Does any of us have any belief that anyone at Microsoft is cognizant enough to add a "feature" like this that won't eventually be used to brute force passwords

Does any of us have any belief that anyone at Microsoft is cognizant enough to add a "feature" like this that won't eventually be used to brute force passwords and/or can be used as a denial of service vector? I can't imagine Microsoft thinking this through properly.