In theory, but in practice some accounts are only rarely accessed by their intended user (might not log in for months at a time). And on the flip side, it's really easy to ignore the displayed last log-in time/IP/location altogether.