The ethical angle is definitely valid, although that is also a knife that cuts both ways. Sendiing the fob to China is the one that gets to me. In effect it provides a key to the security envelope.
Granted that access is limited to the user's authority level, but once inside, a real bright hacker would find ways of increasing the limits. Not what you'd want in the age of cyber attacks.