Big security issue if you ask me. Thats why every user should enroll his device with a personal QR code