But you don't have thousands of families logging in from thousand of different servers: in your case a max of 10 login attempts would prevent it.