The “Limit Login Attempts” plugin helps thwart brute force attacks - someone trying to obtain a login password.
Duo protects you if someone already has your password - presumably they wouldn’t also have your second factor device.
Since they protect against different things there is benefit in having both active.
Hope that helps!
