Don't be so sure. I had a card compromised that had never been used and sat unactivated in a desk drawer prior to the bank calling one day and asking about suspicious charges. I think the most likely source of compromise was a lucky random guess.