It isn't a poor design. MMo accounts get hack daily even if you do not visit suspisous sitres or open junk mail. My aion account was hacked daily (and I changed pw each time) My WoW account was hacked even though at the time it was canceled.

You guys really are cry babies. Do you want a psn issue with ffxiv?
I rather have for knox + secret service + assassins + ninja safe guard my account info instead of getting hacked. Hacked account give people info to stead your ID. So ya. Just use or buy the token. Cuz this security isn't going anywhere.