The attacker doesn't want to open the pump again. Can you imagine how much attention that draws? These devices are so cheap they are throwaway. Most crimes are that of opportunity: install the skimmer and try to get whatever you can get. If the attacker can keep revisiting the machine, posing as a customer, it's the least risky way to harvest data. If the skimmer gets found, aw shucks on to the next one.