I imagine it would make it harder for bots to brute-force login credentials.