If paypal was just a news site, forum, etc. then I think none of this would be a big deal. But it is a big deal for a service with a direct connection to my finances to enable, by default and without input from the user, any kind of "auto login" feature like this. I disable this every single time, and yet paypal wants to keep adding devices as trusted in a way that bypasses my need to authenticate without first asking me. I cannot imagine what kind of convoluted security model convinced anyone that this is OK. At a minimum, this feature needs a permanent disable switch, and at a maximum, it needs to be off by default for everyone unless they specifically opt in. Please give users the ability to disable this feature.
... View more
