Maybe some sort of one use creditcard numbers should be used so that if hackers steal them they're worthless, and have a centralized service for providing those

Maybe some sort of one use creditcard numbers should be used so that if hackers steal them they're worthless, and have a centralized service for providing those one use generated numbers...