the type of account name and password you choose no longer matters.
ie:
username: joe$bob^biggs
password: l1v3@th3beach!

yes, that is secure against a dictionary attack and most brute force... but the pros have moved to keyloggers and are putting out software that gets into the box and watches for you to enter a password somewhere. then it'll send a message to some irc chat room where itself and thousands of other virus bots are logged in. end result, no amount of username/password gymnastics can save you from a keylogger... and it's only a matter of time before explorer gaffs at some animated gif or xml overrun and allows one onto your box. even anti-virus software doesn't protect you from NEW viruses/keyloggers.

the ABSOLUTE best solution would be a revolving RSA key... which is what the blizzard authenticator is based on. get it. get it today. have zero fears.