This is basically how all of the mobile starbucks card apps work. You install the app on your phone, logon to your account, and then when you pay it shows an image of a card with your barcode. In this case, its just using a static image instead of the one generated by the app. I suppose they were ok with the tradeoff of convenience over the security risks.