I have a similar feeling. In spirit, it’s not too far off from going to a neighborhood store where you have a tab, and the proprietor adds your current purchase to it.

Technologically, it replaces the neighborly, human-based facial recognition with computer-vision based palm recognition, and instead of owing the establishment, you owe your credit card provider.

The question in my mind is always around the attack vector. What can an attacker do with this if I choose to use it?

It’s for this reason that I don’t use biometrics (fingerprint or face ID) to unlock my phone. An attacker could, say, unlock my phone by overpowering me, or while I was sleeping. But if my unlock code is information, they can’t take it from my person without my willful assistance. (Backdoors apply to both methods so it’s a wash).

So what could an attacker do with the information of my Whole Foods palm print? In principle, they could charge a bunch of goods to me. But the video and other evidence would show that I wasn’t at the store. The credit card would claw back the funds and make me whole.

Overall, the palm-for-credit model doesn’t trigger my immediate rejection.