This article about master keys, which also features the MasterCard [tm] logo, is written by the same journalist who called skeptics "detractors" in the git master affair.
Way back when I worked at a bank we stored the TMK for the ATM's in the clear in Cobol source ... needless to say after an audit finding from Visa we soon got a HSM.