When did logging users out of their accounts become a standard thing Google does for "security"?
I understand the argument, but it's a big like using a nuke to blow up a bunker.
Here's an idea, how about do away with sessions completely. Log in once and if you switch tabs, you log out. Can't get much safer than that!