Yeah, if there is a piece of hardware (or complimenting software) that is essentially mandatory, I expect them to provide it.
This. It is insulting beyond belief that Blizzard would have the gall to charge extra or require use of third party solutions for security.
You don't HAVE to use the authenticator. Only if you want to use the RMAH. And you can use it FOR FREE if you have a smartphone. Thus the entire concept of 'enriching' themselves is entirely logically inconsistent.