[XorNot]

Digital compared to physical is no comparison at all. A physical shop incurs physical consequences - like people knowing where you are, where your address is, and being able to say "it was over there".

EDIT: And credit cards still require you to reasonably show the charges are fraudulent, which means hey, you get to report it. And now you're out a credit card, so you also need to change it on all the places you need to use it.

[logicfiction]

Anecdotally, I got my credit card frauded 3 times over the span of 4 months a couple years back. I started reviewing sites I'd purchased with online wondering where my details might have been leaking out. Lo and behold, a local store nearby had their POS systems hacked. It took a quorum of local people on reddit to identify that it was this store in particular. My point is physical locations are just as insecure as websites and in fact it's usually a lot less obvious than remembering that sketchy website you bought an MP3 from and never going back.

In all cases it was also my credit card company that called me to let me know I was the victim of fraud on my card. Is it really the case that people need to hawk their accounts? I haven't had that experience for years now.