The problem is, that DAVdroid just went on and on. As you can see from the nextcloud log, it tried about 20 times in a row to log in with the wrong password without reporting it to the user or giving her the chance to interrupt the process (short of killing the app through android’s app manager)