Protected by two-factor sign-in. New browsers ask for a code from your authenticator app; after that you're trusted for 7 days of inactivity.