If we talk about 3rd party MediaWikis, I would say that the best option is not to show any "Help with logging in" by default. Your average website requires a "Forgot password?" link, but that's it.
This is a fair point. On mobile, this is what we're doing now.