I thought it was very sensitive, not sure if still the case. You could get full access to someones wallet and funds when you had his wallet ID. Since then some login, superuser and password functionality has been added, but I m not sure this locks wallets/funds.