rsync - May 2021 - rsync (daemon mode): no delay after failed authentification ?

I wonder why there is no delay after a failed authentification attempt 
(daemon mode).
Should be easy to write a brute-force attack script using RSYNC_PASSWORD...
Wouldn't a delay make attacks much more difficult ?

Regards,
Frank Schaefer