Recently I set up Electrum watch/receive only wallets on a computer and tablet for Point Of Sale use. The lack of a password means that someone could come by and load a different xpub and thus capture our received payments.