HUMAN VERIFICATION REQUIREDASVS 7.6.2 User-initiated sessions
MB-C15ASVS Level 2 Human AssuranceHigh
Creation of a session requires either the user's consent or an explicit action, preventing the creation of new application sessions without user interaction.