Little successes in getting the request/response right in reimplementing a dead device's cloud service is so satisfying.

Security questions? Sure. Lets start with these:

1) Who is your daddy?
2) What does he do?

I haven't see them yet on the device, because now it's asking me to make an account.

Finally got the device registration flow far enough along to get to the home screen.

I guess it isn't really all that unusual since this requires you to be logged into your account w/ email+password already, but apparently on device registration to the cloud a B&N Nook literally asks "Hey, what are all the payment methods (credit card, debit, paypal) and addresses associated with this account?" which appears to include CC + month + date + type + CVV in the response back to the device.

🤷 Why? 🤷

Ahhhh there it is.