@Drone: the point of the article is that, although most ecigs that aren't "smart" shouldn't have a data link, some do, for nefarious purposes.
Also, while there is dumb USB malware hardware (that announces itself as a USB mass storage and contains an autorun.inf), other devices aren't so dumb and are able to subvert the drivers of many widely-used USB chips without you knowing anything about it when you plug it in, and without triggering the UAC popup.
As for the two serial lines, they are not used only for data transfers: non-data USB devices that want to charge up are supposed to negotiate the charging current with the USB hosts through these lines. If you cut them, the device won't be able to pull more than 500 mA out of the USB port.
Me, I use a
USB condom to charge my cellphone from untrusted USB charge ports when I travel. This thing ensures that there won't be any data exchange between your stuff and the power source, while retaining the ability to negotiate the best charging current.