Yea, when the authenticator first came out you had to enter each time. People complained (of course) so they changed it to only be required randomly, though it was still supposed to be authenticating using your ip address (I think). Then people complained about that. Now there is an option to require the authenticator each time.
Guild Wars 2 should most definitely look into it, the world being as it is.
"Dogs are not our whole life, but they make our lives whole."