I wouldn't say it was a legal requirement (as a lot of such things have not been tested in court) but I've seen it in a few places, usually in the section about you being responsible for anything that happens with your account.