Thats the best way to treat customers. Add drm which makes your gamed reliant on their servers for activation, the have them register on your site so all that user data can be nice and centralized so hackers can have an easier time collecting that data.
Isnt there a law that in the USA where if you store personal data on people you have to ensure its safety?
In Europe at least, this would mean that EA is responsible for any personal loss a users suffers due to their negligence.
People should start doing something about this instead of accepting it as a normal reality.