[pachico]

Disclaimer: I work for one of the biggest OTA's in the world, precisely in the accommodation area.

You are describing what could be a reason to keep those CC details but definitely there are other ways to do it, including delegating vaults to third parties.

This is a major fuck-up and there's no way to sugar coat it, I'm afraid.