Actually it allowed them to keep guessing passwords over and over without locking them out. iCloud was protected against this but not Find My iPhone (I think that's the service the hackers got in through) BUT Apple was warned 6 months prior about this bug and their response was it would take too long for someone to figure it out. Apple's arrogance is coming back to bite them in the butt, they need to wake up and get back to basics.