I'm surprised (and maybe somewhat... relieved?) that the protection isn't that hard --- e.g. they could've made this far harder with something based on ISO 7816, and yet not increase the cost much.