I remember reading somewhere how Amazon actively optimizes security vs user experience. I.e. as far as possible they try not to make the user login or enter a password unless absolutely necessary.

You could have a stale login from months ago and still access some parts of your account, but you need to enter your password before you purchase or access some sensitive information.