Presumably they'll want to deactivate the accounts for people who don't settle their bills, and they'll want to keep out folks who don't have accounts. This seems attackable to me, probably because they haven't released enough details about how it works.
Yes those two things are trivial though. Presumably the technological advance here is the ability to tell what a person has chosen and charge them for it without barcode scanning or checkout.