I think they could have it request your login if you sign from a different IP address, but otherwise not do so, but I see what you're saying.