I can't recognize anything dangerouse.
A "lightweight" client is nothing else than NCC connecting to any NIS (not running locally on your machine, but somewhere else). So you do see the whole blockchain, just with the eyes of another node. You don't have to trust that node, because you don't send him a private key with funds, but just a private key with the importance score of your account with funds. The harvested fees are still not at risk, because they are sent to the "original" account with funds directly.
Remote server may use your harvesting power for double-spending.