That exact thing happened to me when I logged into the store I had logged into from my PC before to pre-order the Encyclopedia. When I went to log in a few minutes later, my account was flagged for "suspicious activity" and I had to go change my password.

I gave them a piece of my mind over the CS support e-mail. I will NOT be forced into using their shitty security token. The hoops you have to jump through if you need to remove it or transfer to another phone are just not worth it.