I've said it before, but I'll say it again: I seriously doubt SE is making any real profit off of the tokens.
Even as cheap as the tokens are to produce, you have to figure that they are paying a vendor to produce them (who will mark it up), they have to pay to develop and support the database, pay for shipping and handling, and they most likely have to pay a licensing fee based on the number of users every month.
Once you total up all the costs of launching this, and compare the measly $10 everyone had to pay, I wouldn't be at all surprised if this was actually costing SE money. Most likely, they are barely breaking even. The only upside, for SE, is that they will be able to pull people off of account hackings and reassign them elsewhere (which is good for us too, since it will hopefully mean faster response from customer service).
My PC is pretty secure. I run both a hardware and software firewall, I avoid any suspicious sites, I have up-to-date Virus scanning, I run malware and adware sweeps at least once a week. I am very unlikely to ever get hacked. I still planned on buying the token, even before I heard what the bonus was or knew how cheap it would be, because it takes that 1-in-1000 chance of my getting hacked and turns it into a 1-in-100,000,000 chance.
The Mog Satchel is handy. Extremely so. But you don't need it. You lived without it for years, and you could live without it for years more. If you don't want the token, don't buy one. But please stop seeing conspiracies where none exist. The Satchel wasn't designed for SE to profit off the tokens, but to encourage people to sign up for the added security, which makes SE's job easier and reduces a lot of stress from the playerbase. Honestly, the peace of mind I feel now is well worth the $10 and the extra ten seconds it takes to log in every day.
And yes, security on your PC is your responsibility, not SE's. If you use a weak password, or re-use your password on different sites, or if you share your account info with someone else, then you are to blame, not SE. If a program gets installed that pulls the password off your PC, then that is still not SE's fault. You are honestly better off blaming Microsoft instead of SE if your account gets hacked.
And if you got hacked to that extent, I promise you, you have bigger concerns than your FFXI account's integrity. Like, your online banking.