That would create an easy denial of service attack: if I wanted to deny you access to your account I'd spam it with bad login attempts.