Before any authentication-based features are added, should definitely make sure it can do all its network access over SSL.
Currently the mobile frontend on the m. domains don't offer SSL directly (bug 31333 etc) which might be an issue. :)
Version: 1.0.0 (Android)
Severity: normal