You have a good point and I think tokens are very useful for anything were security matters, but of course if you are really concerned about security you will use multifactor authentication (password + token, or token + biometrics, etc).