I was assuming a chip and pin style card. These, as best as I can tell, seem to have most of the security of a phone-based solution, but with a much smaller attack surface (no internet connection, no cellular radio or baseband processor) and no need for recharging or carrying backup payment methods.