Exactly whoever wants to delete your character would have to know your password before deleting them just to login. At if you have the security token, they would also have to have your phone.