I would imagine there are plenty of ways to get a unique ID for a phone, by fingerprinting the system or saving a cookie, so Apple providing an ID in the API is not really an issue. These are the issues:

1. OpenFeint needs to lock down their DB

2. Phones are great for spying on people