Squishy all your troll like comment shows is that you Either have not understood or have not read the comments above.
Ive had an authenticator since they launched "When the P+P charge was around double the cost of the authenticator itself". my password is as secure as it can be and still be within the bound of normal human memory. And as i said my battlenet email is exclusive to that purpose and has never been given out elsewhere.

Battlenet id using the email address required to log in to your account is a flaw in the security of the system and one that Blizzard have tacitly acknowledged with the upcoming introduction of battletag's "Which should have been there in the first place avoiding all the issue's there have been along the way"
or to put in simplisticly for you."excluding the obvious pc firewall Anti virus etc"
I currently have 3 layers of security to my wow account "secret email, password and authenticator"
Using one of these services or realid i effectivly only have 2 "Password and authenticator"

Which is more secure?