So anyone with your badge (or a copy of it) can authenticate as you? Seems a bit dangerous to me. A second factor seems like it would be prudent.