[ThePowerOfFuet]

> trusting individual websites with CC info

Websites don't keep CC info, and they haven't ever since PCI DSS has been a thing.