eZUser::loginUser() contains multiple eZAudit::writeAudit which makes things hard for other login handlers which might have different or additional criteria for a successful/failed log in. It's also hard to reuse any of the code in eZUser::loginUser() in your own login handler without copy-and-pasting the whole method.