A mandatory Covid monitoring app to be used by all Games attendees has security risks, analysts warn.