This tool(Origin) really need something like this in order to protect its customers. What it needs is simple IP/PC Verification before loging in the account. Sort of like the one that Steam have for quite some time now. If someone try to log in from your account, you will recieve a warning mail with a confirmation code, and the guy who try to log-in will be prompted for it. So that way there is no way that someone can access your account just by hacking into your password.