Can't say I haven't been a little worried about this myself at times.
My token's kept plodding along since FFXI Zilart somehow and the procedure to remove it is gated behind a login that needs it.
Ooop yeah I'm a dork =( I had it in my head I got it with one of the FFXI CE's, but thinking about it, that one came with XIV's CE and I ordered the one I'm using currently from Square themselves a little prior to that.
Afaik this only works for software tokens (aka the phone app)?