> I believe they can also just dumbly-send the normal card data over the air.

Only while the US still is supporting that. Once the liability shift occurs next year it'll be EMV or nothing.