Sign-in stays open during an outage, and guessing still gets blocked

Sign in as usual from the login page. If you mistype your password or your emailed code too many times, that way of signing in pauses for fifteen minutes and then opens again by itself. Asking for a fresh code does not clear the count, so the wait is the full fifteen minutes. The limit now lives with your account rather than with a separate service, which means an outage somewhere else can neither lift the protection nor lock you out of your own account. A correct code is also claimed once and once only.