#joomla now has the only MFA implementation in the world with a pointless and user-hostile retry limit, therefore making sure that people WILL get locked out of their sites, with no way to get back in that doesn't involve database editing, thereby conditioning them to NOT use MFA. I should had never contributed this to Joomla. I should have known better. Stupid me.