Is there some kind of authentication for the serial port in the headphone jack? It sounds like a security risk to me.
"Secure against physical access by all but extremely determined attackers" is worth aiming for. Even if it's just a measure against the resale of stolen devices.