| I think it's just different math. The 15 basis points Apple supposedly charges for with card payments from Apple Pay is meant to come from the fraud budget; that a biometric-based authentication is consider both more secure and easier to counter payment disputes. The rest comes from the convenience and hope that actually results in more card payments. In the US where there's no PIN, fraud is high. Parts of the country are still heavily cash based, so there's a good margin to gain if added convenience results in more card payments. For heavily credit card based markets with chip-and-pin, you have less fraud concerns and less to gain from convenience. My take though is that even if apple opens up the NFC chip, they aren't opening up the Secure Enclave. So even if a bank app can take over the NFC chip, they still will have secrets in memory at some point without a new P-256 based payment protocol. Unless this is a new app backed by a bank cartel, you'll also go from being able to use multiple cards to just one first-party card. This all leads to my opinion of a pretty wonky situation - opening NFC up probably increases the value of Apple Pay, since it can now be compared to other software-based wallets by users, and Apple Pay support again becomes a differentiator for the payment card. |
The NFC chip is itself a secure enclave. (It's called a "secure element" but same thing.)
It does its own key storage, which is why it can work when the phone is turned off.