Brute

Does this .htaccess security setting really work?

No. This does not prevent brute force attacks. In a brute force attack, an attacker has control over all parameters of the HTTP request. ... (Almost) ...