UltimateAuth v 0.0.1 includes a secure and production-ready default login lockout mechanism (failed attempts + temporary lock).
This issue is not about missing functionality, but about collecting ideas for advanced and optional login security features that may be added incrementally in future versions.
Gradual, risk-based or similar advanced lockout methods can be discussed under this heading.