pull down to refresh

Super interesting. What's to stop someone else inserting data onto your chip? And what's to stop someone else deleting your wallet?
I didn't see any controls over the 'insert data' step...