I configured an AD Free for POC purposes.
I am testing if AD Free lockout accounts by default.
https://portal.azure.com/#view/Microsoft_AAD_IAM/AuthenticationMethodsMenuBlade/~/PasswordProtection

Trying different passwords seem to be possible to lockout an account.
{"error":"invalid_grant","error_description":"AADSTS50053: The account is locked, you've tried to sign in too many times with an incorrect user ID or password.\r\nTrace ID:
f4e5042b-8916-4e69-8130-5bb…
But then I try the right password and actually I get the access token.
Wondering if that is a bug, or ths is because is not and AD Premium.