The current definition of Consumption Device stems from front-channel use case and CIBA copied the text from MODRNA Authentication:
In CIBA we do not necessarily have an user-agent in the user's control. More often the CD is operated by the RP like e.g. an ATM
I suggest to change the text explaining CD in CIBA's Terminology Section. Proposals welcome!