Regarding the card reader, you are completly right. But that's the exact same thing with every hardware that needs to be connected to the computer:
- USB cable can onboard a malware as well as bluethoot communication.
True, however, this is a very recent / current issue that was recently figured out; I also read about that. In theory, you can build MITM USB cables and whatnot [1], but it's not an acute widespread issue right now, unlike the card reader situation.
We are selling our own chip card reader because we can trust this hardware. But as you said, it is and will be a major concern in regards of the global security. Just as any other connection: people has to be careful.
Are you actually making your own card reader or sourcing it somewhere? Because if it's the latter, it could be affected, too. The issue is in the drivers.
Here's the first article I can find about it:
https://krebsonsecurity.com/2022/05/when-your-smart-id-card-reader-comes-with-malwareWould be worth checking your products / drivers you ship if they're affected too or not.
[1]
https://mg.lol/blog/badusb-cables/Our readers are sourced from a trusted third party. It does not require any specific drivers as we are using well known chip that uses verified OS drivers. Eg: Realtek or Alcor.