Credit cards don't have radios in them with 24/7 internet connections and software vulnerabilities. I think it is reasonable to assume, as mentioned elsewhere,

Credit cards don't have radios in them with 24/7 internet connections and software vulnerabilities. I think it is reasonable to assume, as mentioned elsewhere, that rooted devices are more prone to data-compromising attacks. And, due to security bugs, devices that are rooted may not have been rooted with the owners knowledge or permission.