Oh I can believe that, it's not so much of an issue in WoW though. Friend of mine got hacked once and it did take him 48hrs to get his acc restored.Personally, 11 years of WoW and 4(?) years of FF-XIV + several trips into other MMOs, not once have I been hacked.
Then again, I am rather harsh about system security in general, running aggressive blockers on websites etc.
So for me, the hassle of having to grab my smartie every time I want to log in is too annoying to bother. I'm sure I would think differently, if I had your experience.