1. Account security is the player's responsibility. If someone steals your account, it's no one's fault by yours. We provide many tools to make sure it won't be accessed without authorization, but every single case someone gets "hacked" involves them not making use of those tools, like 2-step authentication;
2. What someone does with your account is still your responsibility. If they buy gold, sell characters or whatever, is because you allowed them to. We offer such features in the Marketplace for every account, under the assumption that people using them own the account - after all, they logged on with valid credentials, didn't they?;
3. "Something that is free"? Where exactly, on retail? Where is transferring characters between accounts "free"? And if we go by your "free," where did your care about so-called "hacked" accounts go? It was important in the previous line, but when you want it free - which would mean stolen accounts having their characters transferred away for free - that's not important anymore?