Immediately made me think of Betteridge’s law of headlines.

I will remain cautiously optimistic but until it makes it through Supreme Court it’s not a done deal.

I wonder what the sampling/reporting issue is? Why Chinese specifically? Are there droves of Chinese gamers flip-flopping between Linux and Windows? That doesn’t seem likely.

Fail2ban is just another tool in your toolbox. Defense in depth, as others mentioned.

Fail2ban is primarily a tool to prevent brute force attacks, especially useful for services that don’t do their own throttling. For example I usually put ssh in fail2ban, but if Authelia’s built-in protection is good enough, then use that.

Outside ssh, anything that could be used to brute force credentials should be in fail2ban if they’re exposed: web sites with simple auth, mail, etc.