If I understand this correctly, this project seems to encourage developing AC systems with the authorization logic on the public side.
If so, keep in mind that a hammer would be as effective as any authorized contactless device.
If so, keep in mind that a hammer would be as effective as any authorized contactless device.
For lower security scenarios like access to hotel rooms (where trust has already been established) it is sufficient. Plus using a case with proprietary screws, or even making it inaccessible from the outside can also help with security.