I haven’t looked into it because I’m struggling to care really. But I’m pretty sure it would be fairly quick to find a way to thoroughly hose an Android cellphone with a properly crafted tag content. The intent system for NFC in Android tries to do so many things in the background before even handing control over to the user or the registered app that there has to be multiple ways of messing with it.