> but government has passed laws allowing them to compel all manufacturers of reprogrammable devices to all them to reprogram is with their spyware.

In this case the government may mandate to have spyware pre-installed in the factory - which is already the case for phones and laptops in some countries.

> I promise to never reprogram this card so it debits someone else's account

When reprogramming, the card should wipe private keys so it becomes just a "blank" without any useful information.

That doesn't work for two reasons. Firstly the law in my country specifically forbids introducing what they call a "systemic weakness". Among other things, that bans them from demanding every device is bugged. Instead they must get an judge to authorise targeting an individual, then get the manufacturers to replace the firmware in that device.

Secondly, they have no control over companies not based where I live. So I could just import it myself, provided you are successful get ever country to pass a law the denies me the right to do this the way I want to do it.