Security Tokens/Authenticators are useless; SE needs to fix this immediately.

[Nanga]

So... all you have to do is get a (very specific) virus?

Unless SE's official sites get infected, I'm not seeing the issue here.

Uhm, no. Just accept the fact that you don't really understand how viruses, trojans, etc work (incidentally, it's not actually called a "virus" in this case, either), and understand that anyone can be vulnerable and not realize it.