Here are a couple things I'd like to see:
1: A way of using the phone as a remote control, or perhaps as an electronic car key, allowing one to disarm/arm a car or house alarm, perhaps having a duress function in case of carjacking or invasion.
2: A way to be used via the latest Bluetooth spec (which has provisions to use very low power burst transmissions) so the phone can be used as replacement for a HID badge.
3: A standard for secondary access, like a SecurID card, or a Blizzard Authenticator app, but standardized so any website can use it as an option. This will help mitigate keyloggers present on a lot of Windows machines, and limit damage to what a compromised machine can do.
4:
ZTIC-like functionality. This way, a Web browser that is completely compromised would not mean that one would have their bank accounts cleaned out by a thief.
5: Credit card confirmation of transactions. Couple a well made fingerprint scanner (one that can tell a real finger from a gummy bear impression), and this would slow down credit fraud by a good amount.