The article doesn't even mention privacy or permissions. I see no reason to think either of those are being considered at all here. I mean, how would a state-issued stored-value card function without being traceable and revokable?