I have a device with a password that has exponential pauses between attempts. The first pause is one second. The second is two, third would be four seconds. And so on. So if you are guessing, it’s going to be a long time before you can overwhelm it.
That would certainly slow a AI powered hack of your password down but time means nothing to a computer, so it would just try and try and try... a lockout would negate that patience. Consequently, what benefit to all the AI’s computing power if it was stopped after three failed attempts? What advantage if it stopped at two failed attempts and then waited 15 minutes or whatever until the password security system reset the session then tried two more? Eight attempts an hour is not going to clear the astronomical number of letter, number, symbol combinations to be tried.