They aren't kidding: whenever these systems are deployed the agencies choose privacy-destroying versions. They could just as easily have a refillable stored-value version, but instead they have one that reports its subscriber number and is tied to a user's account. Resulting in a data stream that can be subpoenaed or simply inspected.

I guess people are just inured to this. Driver's licenses are full of info not required for driving.

Oh, and a mandatory snarky Manhattanite snicker for "Bridge and Tunnel Officers"