I sign into my account first thing in the morning and leave it on all day. Periodically it signs me out, for security reasons. A yellow band pops up across the top of the page saying my account has been idle for a period of time, they've signed me out to protect me. At the end of the sentence it asks if I want to sign back in. I click, a new window opens up (blank webpage) with a box that asks me if I want to close the window. I click yes. I'm signed back in.
I don't have to put in a password. I don't have to do anything other than click a couple of times.
Anyone who walked into my office could do the same thing.
So tell me, how's that protecting me?