Argh... me too! Evernote really needs to add the notification feature when the account is logged on from a new device - I've taken this for granted thus far with my Google account. Awful. I only discovered the issue after receiving an email today from Evernote bringing the problem to my attention and asking me to change my password.
My account has been accessed many times from all over the world since January from "android" phones. I've set up 2FA authentication now but still pretty concerned.
The ihavebeenpwned website is an eye opener.