Even then with cards they may still need to consider fraud via skimmers, or that the equipment can be vandalized. Going app-only (or vastly reducing the availability of payment machines) means less upkeep for them, but it also moves the kind of fraud to where people have replaced the information or QR codes to scan. It seems like a parallel to what google and whatever entities are pushing them to make these changes are trying to do, at some point someone has to put in work to keep the system working securely and everyone wants to delegate it to someone else.