Magenta 2.4 customer session lifetime one year security

Our client Is asking us to set up this behavior, we know how to configure everything but we wonder if on Magento or in general there is a security vulnerability to consider.
Thanks