The whole purpose of providing the membership card/Pass Card is to issue cards to those customers who have paid for them.
I have gone through a situation where a member has shared the signup/card installation link with his friend and they have signed up themselves without paying for it. This is a big loophole as the links are not secured. Anyone can signup for the membership card if the link is exposed or shared.