I think this is a case of getting away with it due to obscurity. I suspect if phone baseband / NFC firmwares weren’t locked down, there would be enough script

I think this is a case of getting away with it due to obscurity. I suspect if phone baseband / NFC firmwares weren’t locked down, there would be enough script kiddies sideloading “hacking” apps running around doing silly things and ruining it for everyone. At least this way there is a $90 barrier to messing around and screwing things up, which is probably just enough to keep it obscure.