Not if you limit it to trap-only passwords you leaked yourself.

Perhaps would work better if you severely slow piggybackers down instead of outright blocking them. If they think your connection is just bad they won't know they need to escalate.