Comment by Aachen

My mom can also do the identification on my phone and unlock it for me. There is fundamentally no way to prevent proxy issues if you let people do verification themselves

Intercepting the USB reader traffic to feed the computer a different card is about the most roundabout way of achieving that