Ask HN: Never been logged out of Browser FB/Twttr for years and ok with it. You?

My browser sessions for Facebook and Twitter have never been logged out. And I'm ok with this. Nothing bad has ever happened. I do lock my laptop screen when I'm not on it, I don't trust everyone to not do some mischief given the chance.

Aggressive arbitrary session timeouts in cloud apps is frustrating, especially if your password manager is inconsistent in its ability to autofill accurately.

Painful 3 step sign-ins - #1) email, #2) password, #3) 2FA - argh.

How do you even decide 24 hrs vs 30 days vs 365 days for sessions?

Is app security often more for show than need, biased towards super edge cases?