If you want increased security you can add a 2nd factor.
Are you also going to remove the forgot-password path? It has exactly the same security risk as the /u/login.
You could disable /u/admin-login with a plugin, which in the past 10 years, no one has wanted to have developed.