Who can do this?
The brake after failed attempts applies automatically to all accounts. Only admins with user management trigger suspensions and freezes, and suspensions also happen as part of moderation. A freeze can happen at your request, for example if you suspect someone else has access.