With fast user switching, when only the card method is used, as an option, you should be able to fallback to username / password in case you don't have your badge with you.
This is usability vs security, so by default this should be disabled.
Also, a chain with for example card + pin should be possible in Kiosk mode.