No you don't. Trust me.
We don't have them at my unnamed place of employment for a REASON. UNLESS you employ a Citrix solution. Then, maybe, but we employ another two layers of security beyond just ID/PW, just to be triple sure.
Even then, we are abandoning even three-layer info-based security and going to a PIV card. Gotta have the card or no-way-Jose, and this is using CITRIX.
It pays to be a paranoid conspiracy freak in our field.
How the heck did I manage to hijack my own thread and start discussing web security? LOL