In my (tbh quite limited) experience, I have found that physical security devices are some of the worst offenders when it comes to connecting to anything more complex than a simple RFID-tag. I wonder why there are no (or few?) companies that get their devices properly audited before release. I personally would pay much more for devices that have an independent audit published.