"For instance, what's to stop a sophisticated thief with a concealed payment terminal from digitally pickpocketing you [with NFC]?"
Using a barcode instead, with a face of the customer downloaded from a server onto the cash register, as in http://www.facecash.com.