Want a blue to answer me.

Ingenuity –

This post is best suited for the Suggestion Forum, but I want to take the time to explain the authenticator and possibly shed some light on the subject.

Q u o t e:
It is your job blizzard to make sure my stuff is secure, so why do i have to pay for something that should have come with the box game??

Account security is at the discretion of the account holder. We cannot police which websites you visit or which add-ons you download. We can, and do, provide as much information as we can in regards to preventative measures our player-base can take to avoid a compromise.

Authenticators are not only provided via the online store, but you may download the mobile version of the authenticator depending on who your cell phone provider is and what kind of phone you have. If you have an iPhone, iPod Touch, iPad, or an Android you can download the Battle.net Mobile Authenticator application for free through iTunes or the Android Market. If you do not have those particular phones, you may wish to check if your phone is compatible here:

Battle.net Mobile Authenticator Compatibility
http://mobile.blizzard.com/us-en/support-compat.html/

Q u o t e:
One click on an email that looked exactly like a blizz email was all it took for some hacker to steal my PW.

Hackers are becoming savvier when it comes to phishing emails. They are able to make emails appear as though they are coming from Blizzard, when in reality they are not. If you continue to receive emails of this nature that you are not entirely sure of, please bookmark the following support page for reference:

How to Identify Fake or Phishing Emails
http://us.blizzard.com/support/article/25133

Q u o t e:
I've managed to keep it secure for 4 years now.

I applaud you for this! It is completely up to you if you wish to purchase an authenticator or not. We cannot force you to have one on the account. I will say this much: $6.50 is a small price to pay for 4 years worth of time, effort, and work.