Yeah those security flaws aren't any worse than a standard credit card. One can get your pin if you're rooted and the second one negates the first as you can simply clear data on the wallet app to reset the pin. I'm not too worried.
On topic, I used Wallet last night to buy a couple red bull's...