Some authenticator like Google Authenticator not mandatory but an option to be safe from unauthorized access?

voted yes. see no down side to additional account security. furthermore as i understand it the google authentication mobile app supports totp and hotp algorithms both of which should be relatively easy to implement.