They already do this. Well, I know they send out warnings of suspicious activity and make you change your password, anyways.