They did state why it happens: Logging in from a different IP/Machine (especially if the IP range is large enough it resembles an outside source, e.g someone else logging in on your account) will block the account. Using a token will prevent this from happening. This is why even if you know the person you can't ever log in for them or something unless they have a token.