If the vending machine handles credit cards, wouldn't Visa / Mastercard / etc. basically require it as part of their security requirements? Or it's just general CYA from someone that's backfired badly.