Yes,this is so true because you will need to add pass and pin everytime and this is sucks
The validation required is meant to serve as a safety measure for YOUR bitcoin funds! It's hilarious how people want the convenience that Xapo offers but none of the security and then these people will start a thread on this forum talking about how their bitcoin were lost or stolen from their laptop.
It also represents a lack of knowledge of how banking businesses are run. A banking business can't be expected to develop a reputation as sophisticated, secure, reputable if they don't have specific security in place to protect their customers assets.
If you don't want the security validation you should keep your bitcoin in an offline or paper wallet...it's not a criticism to Xapo!