I created #419 to change the default to, say 20.

Three failed passwords in the window is so incredibly easy to do, especially with a complicated password, or with multiple keyboard layouts.

Here are some downstream examples of people complaining about the default: https://bugs.archlinux.org/task/67644