the hypothetical scammer would not have known in advance that PSA did not have a reasonable system in place to ensure the safety of cards once the package arrives at their door.