POI devices are set to capture account data only through SRED-validated mechanisms; every other capture mechanism is switched off or otherwise blocked from P2PE use so the merchant cannot turn it on.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.