How secure is the protection of the "admin panel" of the site through http basic auth?

Question

System administration

Instead of the "admin panel" you can put any other node that you want to hide from prying eyes.
Let's say the password is large (32 characters, for example), so that brute force does not roll (by the way, how to set a limit on the number of attempts (well, or a timeout after several unsuccessful ones, preferably nginx)).
Are there any known holes/pitfalls?

Answer 1

Are there any known holes/pitfalls?

MiTM