I think we can be pretty certain Facebook already has robust login attempt throttling systems in place.