i feel like deleting character should take more than just entering character name

[Valkyrie_Lenneth]

That's definitely a best practice on the side of the consumer...

But it wouldn't hurt for SE to implement a password layer. I doubt it would be a high priority addition, and the number of players it would impact isn't likely to be all that high, but there's no compelling reason to say SE shouldn't consider doing it.

There is a password layer. Account login. There's also a secondary layer in the token. I mean, if you step away and they need a password to delete the character, but not use it, they can just throw away everything you have. would amount to close to the same thing.