It's worse than that: contactless payment has two modes, and one of them just lets you read the magswipe track 2 data (including card number) through the contactless interface.

https://www.level2kernel.com/emv-glossary.html#MSDmode