Do you ever try breaking the site you're interacting with?
I'm always thinking "what will people try to do" and then coming up with a solution for it. If I saw a card like this I'd try to pick it up. Then once I discovered it was draggable, I'd try seeing what happens if I throw it outside the browser.
What do you think?