It's definitely far from being an easy attack. But it raises an interesting question in that the current smartphone security models don't require special permissions for accelerometer access whereas they do for cameras and other things.

With this kind of stuff and other advances in activity recognition, allowing any app to record anything using the accelerometer might become a privacy threat.