this is why they like the world to use insecure payment systems. It gives them an excuse to surveil people. The credit card number with the expiry date and 3 digit code is a private key. People put it in websites all the time. They could have moved to public/ private key encryption years ago, but then there would be not need to monitor and id everyone.