It would also prevent unauthorized withdrawals done with stolen cookies using XSS bugs or MITM (for example in public wlans)