That story was mentioned in this recent thread.
And the reason cybersecurity hunts for these where I work is that using them leaves your computer unlocked beyond ten minutes of inactivity, when it’s supposed to lock to prevent someone else from using the computer while you’re still logged in.