I would be very interested to see just how many people "get hacked", also bought/buy gil.
Seriously, all this whining and bitching about getting "hacked" - you honestly think that you were just chosen at random for your handful of HQ items, maybe some HQ staves, and possibly 1-2 mil in gil? Give me a break.
I'm rich as hell, have plenty of HQ, and it took ME, 1 week to get around the "extra security of a game token" so I'm either God, or people are doing something really really stupid that is compromising their own accounts and they have only themselves to blame.
Watch the company you keep; "Lie down with dogs, wake up with fleas"
Don't get stingy with the digits when it comes to your password. Upper/lower case letter deviations. Alpha/numeric non-sequential pairings.
Don't talk about your password
Don't give out hints
Don't be a hero.
...and yes, even though the game token can be made null and void, as afor-mentioned; it is an "extra layer of security"
While it is hackable, consider the hackers. If they were oh-so-brilliant, they'd have jobs making real money instead of dealing with selling gil to pussies that can't play any other way.