This is actually a fantastic feature. I was recently traveling in Europe, and without thinking logged into Facebook without HTTPS (using a third-party iframe app that couldn't use HTTPS). Within a few hours, I had a notification from FB letting me know that there was a new login from the same city I was in and a different OS/web browser combo.