Heh unfortunately gas station pumps are exempt from the immediate liability shift and get an extension (https://usa.visa.com/visa-everywhere/security/emv-at-the-pum...) which means this will be a prime attack vector as the shift changes over the next few years.