Nfc is invizible communication between both parties, so it makes it harder to verify their behavior as they could signal eachother to make up rules. For example, device A could signal to device B that once it loses connection, it creates a dummy transaction, and once it reconnects, it creates a malicious one.
Because you likely verify with seperate devices, you will probably loose connection with one to make a connection with the other verification device, in the mean time the host device or the "hardware wallet" could change the transaction to a normal one to hide the malicious intent.
But I can be wrong.