I think you should be worried more if someone plugs a usb into your phone than stealing data through nfc. Distances are too small, and with nfc by itself you can't send but a few bytes, like bt pairing code. If you fear that someone will do that, enable "confirm sharing and connecting" and that's it.