Exactly, and the vast majority of the attack success is in a very short period of time.
It will make credential attacks much harder to pull off successfully and the returns from using them will drop pretty dramatically.