Anyone can mint

What is the security problem in this token?

function mint(address to, uint256 amount) external {
    _mint(to, amount);
}