In addition you can use long alphanumeric pass codes and even the default new passcode option is being increased to 6 digits (though you can choose a 4 digit option).
This renders the brute force option pretty useless. Which I'm fine with, I don't want to make things easier for crooks or identity thieves.
In this case they cut the power to the device before it can write to memory the failed attempt (IIRC) allowing them to keep trying over and over (with a small delay for the phone to restart every 9 tries).
Unless the iPhone has some fairly high-grade encryption hardware I suspect you can just do fun things like copy the (encrypted) storage/key to brute-force it without the safety mechanisms kicking in.
David Schultz wrote a pretty comprehensive article about it:
I'm not trying to add to the debate here but couldn't they brute force it?