this is why they like the world to use insecure payment systems. It gives them an excuse to surveil people.
The credit card number with the expiry date and 3 digit code is a private key.
People put it in websites all the time.
They could have moved to public/ private key encryption years ago, but then there would be not need to monitor and id everyone.