Security tokren questions:

[Barraind]

It is the most secure way to do it though, even if it is a bit inconvenient.

Compromising security for convenience isn't exactly a good thing.

Mines been I use for 8 years now, since 1.0. Never had an issue, and my account hasn't ever been hacked.

I had one on my original ARR account.

It took about 3 weeks for it to be hacked, and I still haven't been able to recover that account. (Apparently there was an issue with some of the authenticators they used).

Similarly, Blizzard had the same issue with a set of their physical authenticators at one blizzcon. "Oops, everyone who used this got their account hacked, our bad...".