Just found a 'security' bug on stadia. When you have a pincode set for your controller(s)/stadia. If you start a game directly from a phone to a chromecast, it doesn't ask your for your pincode and you can directly play the game + go back to the Stadia main screen.