Account Flagged for Suspicious Activity!?

[Kaedan]

and why are people so ok with just going 'security token lol'?

Because you should be using it. Seriously, either get the token or at least get the security app. One of the two should be mandatory, IMO. Otherwise you're asking for your account to be stolen.

It's not hard to carry a fob or your phone with you.