Hi editfish,
properties are there for any particular use, completely multi-purpose. It is simply metadata associated to an object. This metadata is only visible to users that can access the object itself. So the use you are giving to them sounds great.
Regarding security ... data is stored in a MySQL Server ... and the rest depends on you server configuration, permissions, etc.
Thanks,
Marcos