I have a paypal account, ebay account, amazon, countless other websites with more valuable information and WITHOUT an authenticator and I have NEVER been hacked in my 25 years of existence. I didn't think I would need one for something as simple as my runescape account. lesson learnt I guess...