Never trust reviews. Nine times out of ten they're written by fanboys, written out of spite, or paid for by the product in question. It's quite rare for a review to be legitimate.

As for whether or not the security token is worth it, it is. The app works fine, I've gone through the process of disabling and re-enabling it to transfer devices without issue as well. I can't speak for the physical token, however, as I've never used it (nor would I ever bother with a physical token, as it's just another piece of clutter that can be lost).