Restricted API: A smartcard exports a minimal set of interfaces to avoid exporting flawed interfaces that lead to vulnerabilities.
Mobility: A user can carry a smartcard, physically separating it from the outside world.