> In the meantime, these active cards are just sitting on my porch in a big envelope that says "CITI - URGENT - PLEASE STEAL ME" written all over it.

I have more than a few credit cards, and I've never encountered a card issuer in the US that mails active cards. All of them require some sort of activation process before they can be used. That way, it doesn't matter if they're stolen.