The savvy scammer in this case wouldn't be able to get too far. He won't have access to the specific info on the Disney card -- just the card itself. In other words, after going through the trouble of replicating it, he'd only be able to use it at Disney -- he won't have access to the credit card info linked to your card, because that's not actually on the card itself.
The savvy scammer would ultimately be able to create a card that's only usable at Disney, only for the time you're there -- which is unknown to the thief -- and only for a limited amount of money, since there are limits to KTTW charging privileges (which is also unknown to the thief).
Put it all together, and I don't see why a scammer would waste his time and effort for a payoff that could be quite small. Also, with all the cameras at WDW (especially in the stores), once someone alerts security to the scam, he's bound to be caught or at least identified.
And finally, in most cases the customer isn't liable for fraudulent charges. I haven't seen the specifics of this case, but I can't imagine it would be otherwise. You should always keep an eye on your bill anyway...