Someone should clarify if this

• leaks only the cc number (as shown here)
• or otherises a payment

Contactless payments use the EMV protocol. Leaking the cc number is bad, but happens all the time. An actual payment athorisation replaces both PIN and signature. The victim’s bank will argue that the victim authorised the transaction at the POS.

I don’t get this argument. Most business don’t own any property. The office buildings are rented.

This will work perfectly for OP