A bot trying a thousand passwords a minute, a script spamming posts: every public endpoint needs a speed limit. Redis builds one in a few lines, because counting and forgetting are exactly what it is good at.