Ron Rennick on "[Plugin: WordPress MU Domain Mapping] security issue with allowing users to map their own domains"

While it is fair enough that It allows them to direct the subdomain URL to their own site, it is not a security issue.

Doing that does not give them access to any data or admin screens that they did not already have access to.