I think part of the condition of recovering a stole/hacked account is to require the user first purchase and/or apply an authenticator/security token. If there's a free iOS and Android version of this app, there's absolutely no excuse not to have it. Whining about it is like whining about having to register an account or typing in a user name and password. Just get it done.