I can't believe people are calling that a "minor" inconvenience. It's a huge pain in the rectum to have to change your password every time you login if you're on a dynamic IP ISP. Making your game a pain in the rectum to login to is not smart, especially in XIV's current state. It pretty much forced me to use the security token which is just as much a pain in the rectum as having to change my password each time.
I should also point out that forcing people to change passwords that often makes it very insecure as people end up having to write passwords down in Notepad or on paper. I had to do that with my university e-mail account because they forced us to change it every three months that by the time you remembered it you'd have to change it again.
Never in my 13 years of using the internet have I had an internet account accessed by an unauthorised person. It boils down to common sense when creating passwords and downloading files off the net. This should be OPTIONAL. There is no argument here. The only way people are getting in my account is if someone launches a PSN style attack on the SE servers and it's down to SE to secure those.