Typical scenario: Account gets stolen by third party. Third party uses high level character to bot for gil. Sells gil and makes money. The key here, they didn't pay for the game or time required. They just used your account. It has happened and is happening. If you don't want the authenticator, that is your choice. However, if you account is compromised, don't blame anyone but yourself for lack of security. Oh and yes, a Macintosh can have spy ware. It's just as common as Windows machines (and even Linux machines). The reason they don't steal your bank info? That's a federal case, stealing an online video game account is pretty worthless to the police.