When I set my API key, I have the option to enable controls. I can enable all or none, but not some of them. I only use one or two of the controls. I consider having controls I don't use a security concern. If an attacker gains access to my account, I think it would be less of an issue if all they can do is wake up my car or start the air conditioning but can not unlock my car.
Customer support service by UserEcho