These tables grow; waste memory
Table contents could become less useful over time (DHCP leases expire, etc)
In OpenBSD 4.1 and newer, pfctl can expire table entries:
# pfctl -t bruteforce -T expire 86400