Login twice on same account? Good or potential security risk?

I really hope they fix this soon. It's the exact opposite of what they should be doing after the hacking event earlier this year. What they need to do is make it so no one can ever log in. The only protection that's 100% is abstinence.

My friend just got hacked due to this.