To protect these devices, they have a very limited interface to the outside world. The devices cannot run anything besides the program that they were shipped with, so cannot get a “virus” or “malware”.
The code used to power the device is also shared with our banking partners to allow them to independently validate the security of the devices.