If they really wanted to keep people's accounts safe, they would implement a similar system like Rift.

If you log in from a different Ip, your account gets coin locked. Meaning you can't do any trades, buying/selling etc or delete a character until you unlock it. Of course this isn't fool proof either if you use the same email password everywhere but there is only so much one can do to protect people from their own stupidity.