Here's a serious bug with the new mobile theme that was rolled out.
http://meta.stackoverflow.com/mobile/off can be forced upon someone because they use GET rather than POST.
I don't think it's dangerous, those actions just alter your session.
edit: I had attempted to trigger rep recalc, but that requires a POST apparently. The OP mentioned actions work with a GET request.