If I see your password, I can write it down and use it later without you even knowing I was there. That's why we never send passwords in emails.

> Maybe requiring you to re-enter your login session password, as a pseudo master password, would slow down a really naive attacker.

That's exactly what I'm trying to achieve. It's a real concern for many people. Please show this to a non-technical person and see what they say.