From an usability point of view, yes it sucks

From a security point of view, they're absolutely doing the correct thing, though account lock-outs also allow for denial-of-service attacks

Maybe we need to not lock people out of their personal iPads forever (just make the person wait 30s between attempts) and if you want stronger security then you actually enable it (because people who want that are "smart enough" to set it)