I'm pretty sure Blizzard can find more then one source for an authenticator like device. They would likely have a contract which specifies how much their cost is per unit.

Even if Vassco were to charge $20 for each, Blizzard could easily include an authenticator in each boxed Warcraft product, and simply pass the cost along to the consumer as either an increased cost of the game or a portion of subscription fee revenue.