Might be a bit more than that wrt card setup.

This system uses SUN authentication on the NXP 424 card. The card tap data changes on each tap and this is used to verify that you have the actual card and haven't just copied the data.

The setup of the card to achieve this is described in the documents on this repo as well.

Yes, it closes the loop, as you said.