I think this statement needs to clarified whether it was limited to two cards per person or just two issuing bank per person in one time.

I believe the usage of PIN at 2015 would be similar to present MEPS system that you needs to key-in the PIN into the card reader console . Honestly, I think the measure is good to reduce the risk of being stolen or misplaced card