The Security Token is nothing more than a way for SE to get more money. It doesn't actually provide additional security because in order to remove it, all you need to do is have the security code from the back of ANY token - not the token actually linked to the account.

If SE actually cared about account security, they would use a system such as this like Blizzard uses, but they do not. They care about getting an extra 20$.