Indeed. They will get hacked sooner or later and here's a true story: I had a fellow GAFer remove his authenticator for 24 hours, so that I could try out the MoP-beta. Loe and behold, he got hacked - immediately.
Damn, that's just scary
Hackers are a persistent bunch, or he must have some really good stuff in his account.