Security questions aside, Opencard is unpopular with data privacy groups