Average Joe will pick convenience over security every time, unless it's such an absolute shambles that they actually fear (or have been convinced they should fear) using it. Not to mention the already-formed habit/association of "hey, I'm paying for this, better whip out my card".