This is the same credit card I've been using on their site for several years. This is no excuse.
Unless you have proof they aren't selling that data, I'd assume (based on my experience at a major location-sharing company and a major credit-reports website) that they are absolutely selling that data.
VRBO isn't directly comparable because it doesn't compete with AirBnB for hosts. Nobody lists only on VRBO, unless they've been banned from AirBnB.
VRBO doesn't do this, and has way harsher payout policies for new hosts than AirBnB. VRBO can do this because VRBO is not trying to attract new hosts (new to hosting, not new to VRBO) in the first place.
AirBnB can't do the VRBO thing and escrow payments to new hosts for 30 days, that would be super discouraging for newcomers trying to list their flat for the first time.
Hotels don't have to because there's no route to pay with a stolen credit card and then get that money into an account you use.
I could set up a fake AirBnB, steal credit cards, book my own fake AirBnB, and then run off with the cash. There's no equivalent workflow for hotels.
It's mostly a problem for "platform" style apps that have both ways to send money and ways to withdraw money. Turo and Ebay are probably better comparisons here, and may have similar issues.
If AirBnB didn't do this, they would simply cease to exist at some point.