It's definitely a scapegoat, but aren't some of the statements in this article false? For example, I thought it can be used in NFC relay (not replay) attacks wi

It's definitely a scapegoat, but aren't some of the statements in this article false? For example, I thought it can be used in NFC relay (not replay) attacks with an app. I also thought there are alternative firmware options that you can use to precompute values to roll forward codes.