I guess the obvious concern is with someone figuring out a way to turn any smartphone into a key to enter any room; I'm guessing it would be easy to do given access to the person's email? Hopefully they make sure that it's done right the first time before any kind of incident.