You need control of the hardware to insure security. Think about what you could do if you run the credit card verification software in a debugger.