While you're at it Microsoft, please also give a way for users to remotely log out all active sessions on other computers and devices.
It's nice to be able to force logoff everywhere.
However, in the case of a hack/theft, shouldn't changing your password also invalidate all login tokens? You'd be doing that anyways. Right? ;)