I understand this is to try to prevent people from bruteforcing accounts and other abuse, but can you please return a nicer message when you get blocked because of too many failed logins?

Telling people they have the wrong password when it is not wrong is bad UX and to be quite honest gives me a heart attack when it happens because I think someone has gotten into all my accounts.