I suspect they could do it somehow that would not have any part of the game give access to the financial info of the player, like have a steam key embedded in the token or etc.
They already did something with reroll tokens in MO1, so they have the framework.