Again, what is your solution? Assume for the moment that account theft is a real problem, and that the old email-centered security wasn't stopping account theft. How do you stop it?I don't need/want their app on my phone. So tired of companies and this practice.
"I don't need their app on my phone" is something you're rock certain of until someone steals your account. Then you realize why security actually does matter. It's not "companies and this practice" that are the issue, it's thieves.
I haven't had any problems with my Steam account, but I did get my WoW account stolen and used by gold farmers. Blizzard got a complaint, figured out it'd been jacked, locked the account and contacted me. I'd long since gotten bored with WoW, so I left it locked. If I'd wanted to return to WoW, my first step would have been to set up Blizzard's two-factor authentication.