Banks will readily send you a completely separate computer just to perform payment transactions with. It's very thin, and you can even get a phone case that holds it as well. There's really little reason to bundle all that functionality up into one device, especially if a consequence is that doing so requires you to run surveillance industry malware.