"Your keys, your money" is the cornerstone. How does the app ensure truly secure, private key generation *on* the NFC card, without their access? That is the implementation challenge.