In reply to Zeokat.

From the Theme Review Requirements:

Provide a unique prefix for everything the Theme defines in the public namespace, including options, functions, global variables, constants, post meta, etc.

It's not about security, it's about themes clashing with WordPress core or plugins. If they use the same name for one of those things as something else, there will be problems. By adding a prefix, it greatly reduces the chance of a clash.