Authenticator for iOS / Android

[Ingolf]

They use the same token (Vasco), it's easily removed on SE's end because people would bitch if it wasn't easy to remove. You should know that by now.

Hence: "Not every security token system is built equally.".

I'm aware a lot of organisations use Vasco security tokens, but the system behind it is down to the company using it.

It's a bad decision on SE's part, and goes against the fundamentals of the ideal behind a security token. (not that surprising seeing as it's XI and XIV)