If 95% of those that purchased the Security Token for the Mog Satchel, then it has done its job as an incentive to convince those people to buy the Security Token.

The real question is, what percentage of those players, after purchasing the Security Token for the Mog Satchel, then kept the Security Token linked and used it?

I'm willing to bet it was more than 0%, which means the Mog Satchel has done its job as an incentive to convince players to add two-factor authentication to their account.