As a customer, I might actually rather have someone get my credit card than a password. The bank will find the credit card fraud quicker than a website finding

As a customer, I might actually rather have someone get my credit card than a password. The bank will find the credit card fraud quicker than a website finding out my password has been compromised. And if someone gets an email account's password, a lot of damage can be done.