Yeah, authenticator is more-or-less a must with Blizzard accounts, I've found. I have an email address set up exclusively for my Blizzard account and even that was hacked once back in my WoW days. If you have an Android/iPhone or even a few spare pennies then it's pretty much a no-brainer.