Threat modelling, don't let the perfect be the enemy of the good, etc. What are you defending, and from who? You have to consider that.

For real though just bring your actual card instead of trying to load it onto your phone. Why give Apple and Google your card's private key?

Because it's graphine and the entire point is that google is not involved in any transaction between you and your banking app.