Force disconnection

[Darki]

I do not see how it could backfire if you could only do it while you are logged on to the website, which also requires the OTP.

Two reasons: Not everyone uses the OTP (which doesn't make an account 100% hack proof anyway) and a force disconnect feature can be reverse engineered to gain access to an account; it's a two way street.

Think of this analogy: It's better to have thin air to nowhere than a well fortified door that leads to something of value to you. I'm not tiring to shoot down your idea for fun, i'm merely pointing out how it is.