Clarify security implications of granting "View any Product product" permission

Hey Ryan and all,

A quick Drupal Commerce permission question just came up: What are the security implications of granting all users (both anonymous and authenticated) the "View any Product product" permission? There is a security warning on that permission, but I can't seem to find anything particularly bad if all users are granted this permission.

The use case I've got is that if I want fields attached to a product to display in a view--and if that view is placed in a panel that is overriding a node--I can't get the product fields to show up for the user unless I grant the user the "View any Product product" permission.

Thoughts?

Thanks,
Ben