BrowserID breaks this.
I guess it can't be 100% automated, but you don't want automated logins anyway.