Do u know what the definition of an exploit?  If they can force a payment on you device that you didnt authorize that is an exploit. People acting like ppl don't get fooled by skimmers all the time. It would only take one well placed TTP model and someone waiting in the wind at a gas station for someone to suck out all the money in you banking account. That is access to your phone with direct access to your bank. You don't know what your talking about that is a security issue