The notion that the security token is just a money-grabbing venture by is nonsense.

The whole reason the token is effective is because it's not connected to anything, thus isn't vulnerable to hacking or anything.
$10 every several years is a trivial expense.