when somebody steals my credit card, i have auxiliary (insecure) verifying information with which i can verify that i'm me when i report them. when somebody steals my crypto-widget, what do i do to stop them? if you trust the crypto-widget's PIN and fingerprint systems completely, then in anybody else's hands it's an innert lump of plastic, but there are bloody few technologies i trust that completely, especially since the crypto-widget's unstealability appears to depend on it's being a black box - as soon as somebody finds a clever way to look inside the thing, it gets a lot trickier.