The dial-in authenticator apparently doesn't work with Diablo, the only ones that work are the physical authenticator and the smartphone app. (source: various forum posts, nothing I can find right now).

I'm not convinced there's any actual security breach, but Blizzard has been doing a pretty terrible job of explaining the authenticators to their players.