Does AuthJS provide signin/signout rate limiting out of the box for providers like Google?

[Randulfe]

If so, any details on what these limits are?
If not, we need to implement specific ones for the auth routes I'm guessing and the responsibility falls in the users right? Would potentially be nice if these came out of the box to prevent forgetful configs