This is an interesting situation. At first I was confused why anyone in the MTA bureaucracy would green light a "trip history" feature that didn't require the u

This is an interesting situation. At first I was confused why anyone in the MTA bureaucracy would green light a "trip history" feature that didn't require the user to first create an account [0], but then I realized that a not-unsignifcant number of OMNY users simply want to get a subway card, and not go through the hassle of setting up a username/email/password with OMNY. It would be obviously problematic to require every subway card purchaser to have an email and/or phone number. While the OMNY "Trip history" feature would make it even trivial (it's not unheard of for ex-parterns to have seen each other's credit cards during the relatinoship) for someone to stalk their ex's movements, I'm also thinking that requiring an OMNY account would be a minor friction point for a bad actor. Assuming most OMNY users don't register an account, a stalker who knows their ex's credit card number could simply create an OMNY account using any email address they want — in the scenario where their ex never registered their OMNY card with an account. A complicated situation...I guess one compromise could be for OMNY to only give access to the Trip History feature for registered users. After all, if we can assume most subway riders don't want to bother with an OMNY account, we might also assume most don't need to check their own trip history. In the case of a financial dispute, they can bring their card to a subway teller in person (yes this creates a hassle, but everything security-related has tradeoffs) [0] https://omny.info/trip-history https://omny.info/trip-history