About your point in [1] yes it is complex but maybe 50% is done by the issuing bank/institution

And people do underestimate the complexity of it