I love my current pixel 5. Ive had it for several years now, and the size is really nice. My battery is starting to show wear and the charge port doesn't connect very well, although I probably just need to give it a good cleaning.
Unfortunately, Google will only push security updates until this October. Third-party OSes like Calyx or Graphine will keep the open source components patched as long as they can, but they can't fix any bugs in the proprietary pieces.
Although its definitely more expensive, I keep thinking about grabbing a refurbished pixel 7 or 6, since google promises 5 years of security updates.
You're not gonna have much luck. If you're able to clone these kind of cards, its an honest security vulnerability and should be reported.
As an alternative, I've seen people suggest using a smartwatch, like the Garmin ones, that have a "wallet".