The "physical" authenticator that I own cost me £6 when I bought it (and likely its battery is going to run out soon, now I think about it...) I think it's a little more now, but it's really not that much. Less than the cost of a month's subscription to WoW, certainly.
In addition, there is a free app that you can get for pretty much any phone platform (including certain older "featurephones") that acts as an authenticator for your account.
Sorry but there really is very little excuse for not having one, and ANYONE can get hacked. My own WoW account was hacked 5 years ago - all my stuff was taken and as I had very privileged access to the guild's resources, most of the valuable stuff the guild had was taken too. It was all restored, but it took a week to do so - and the guild was set back somewhat in our progress.
There was a flash vulnerability that was being exploited by the hackers to obtain your password, I had updated flash on all of the machines I used, except my work one. Logged in to the WoW forums from my work PC during lunch and not long after that I was hacked. The hacker even had the cheek to send me an in-game mail telling me he "was leaving me a little". (32 Gold, and the gear I had on when i had logged out).
I have very little sympathy for people who get hacked if they do not have an authenticator.
The same goes for D3, and would also go for SC2, if there was any worth to actually hacking in to people's SC2 accounts.
)
