You buy IPTV stream passwords (or whatever is used to log in) from some guy and once he knows your card details he can use them for anything else, yes. That's how it works.
Not really. Most places use crypto now and those that still also accept cash use PayPal or Kofi – they’re not getting card details. That’s how it works