The report[1] calls out binding the cookie to the IP as only being a temporary measure, exactly because it's a usability problem. Their longer term solution is

The report[1] calls out binding the cookie to the IP as only being a temporary measure, exactly because it's a usability problem. Their longer term solution is to bind the cookie to the device (how?) [1] https://hackerone.com/reports/745324 https://hackerone.com/reports/745324