Are there any security implications with enabling "Data Access" on a sever?
Enabling Data Access is not considered a finding in the CIS Microsoft SQL Server 2016 Benchmark but that doesn't mean it couldn't be a problem if it's poorly implemented.

If you are querying data on another server limit the privileges granted to the remote user.