I haven't run into any 'cons' of using YARN ACLs. ACLs will help you as more users/groups of users end up using the cluster.
If you are using hiveserver2 with doAs as 'false', then all your jobs are running as user hive. In that situation, you have be careful on which queues the jobs are submitted to since YARN ACLs will not help you there.