It would be interesting to compare this with other low-hanging fruit attack vectors. If you already have physical access, what velocity controls are there in place to prevent me from just repeatedly running cash through the ATM to clear out the entire wallet? vmception is right that long game attacks are way more interesting.