As someone who knows someone else's PIN: if they're too inconvenienced by making the payment themselves and don't realize what security it's meant to offer, they'll be quite content to hand the card and the PIN to someone they trust.