Form submission limit settings to help with security…

Why not have a setting where admin can limit the number of times form can be submitted per minute(s), and admin setting if form submitted exceeded, then user is blocked for X (amount of time set by admin). This would solve bad bots hammering form with card testing.

What real user would ever try to re-submit the same form more than three times within a few minutes? Probably… none.