Agree. There are also ways to avoid subjecting merchants to the responsibility of securing credit card data in the first place, like the Click to Pay initiativ

Agree. There are also ways to avoid subjecting merchants to the responsibility of securing credit card data in the first place, like the Click to Pay initiative launched last year by Mastercard, Visa, American Express and now Discover. Merchants cannot lose data they never have. Tokenized payments also work to help avoid giving data to Merchants, via services like Apple or Google Pay. Other PSP services can serve a similar role like Pay with Amazon or PayPal.