Is there anyway we could enabled, or forced to enable some form of IP lock/check on our accounts?
Steam client is a great example of this, if you try to log into your steam account from a different PC it asks for a security code that is sent to the accounts registered Email Address.
This not only lets the account owner know that their account may have been compromised, it also adds a level of security to your account.
It might be a bit of a hassle when installing XIV on a new comp, but I'm sure it's something the community would agree upon having.

Could you also remove shouts from preventing the auto-log out feature? RMT spammers just stand there all day shouting, 90% of them are bots just spamming.