Yes. And on their website they have pop-ups to nag you to do it constantly.
LinkedIn sent me an email saying I had a new contact. When I clicked the link in the email, it put me on the LinkedIn site. As an afterthought on the "we added your new connection" page, they tried to phish my email password.
It's a shame that a company with an already bad track record in user security would do something so careless yet again.