I assume it's the private key that's under your finger. Without any additional security measures, how can one be sure that a paper coin is unspent?