"Should happen remotely" – according to who? What is the security risk for the end-user? "this suggest a fundamental lack of security practices at the company"

"Should happen remotely" – according to who? What is the security risk for the end-user? "this suggest a fundamental lack of security practices at the company" – that's a stretch of a conclusion to make. You're being as hyperbolic as the original post. What didn't I understand about the article? This still offers a slight increase in security over static barcodes, without introducing any new vulnerabilities.