no minting - currently every new account receives 20 tokens for free. A better version would be to have a faucet with a limited supply per time amount, to avoid overflowing of the system
no sybil resistance - together with the automatic token this can be used to completely overflow the system. One possible solution is to add a captcha before creating a new identity. Or proof-of-personhood, of course ;)