He keeps saying "ATM card" but is he really talking about a debit card? They are different. But he never makes it clear he gets the distinction. They are both vulnerable, but this lack of clarity throws his credibility into question for me.