Ok well basically to log on the account you need the authenticator, thing is its almost yours cause if he knows you put an auth on it then he can take it off if he has full info, but its more likely to be not known then bnet account
more people are suspecting the bnet account not the authenticator
plus if you put one on and delete the app its baically banned, much harder to get taken off.. so ya