Earlier quoted context omitted.
The last time my cc was compromised is when the bad guys injected js into a large e-commerce site and stole the card data. This is a real threat. I’d rather not use any pull based payment mechanism if possible. Push only.
I understand the potential security issues. But the only affect this would have had on you is you would have had to contact your bank to reissue the card and chargeback any fraudulent transaction. Consider a similar hack on a site that accepted Bitcoin instead of credit cards. The fraudulent JS replaces the payment address with the hacker's address and you send your coin to it. There's no getting your money back now.…
Getting new cards is a pain, especially if you are traveling. You are without a card for a bit until it is replaced. And chargebacks are a headache. That is a good point about malware, However I would bet address substitution would be discovered a lot more quickly. Magecart was ripping vendors for weeks before the cc vendors tipped them off. 1 bad purchase flow and the customer complains and the site would investigate. It’s pwned for minutes not weeks. Cc theft can be silent and might only strike its victims months after the compromise.
The difference is the victim. In a malware scenario, cc’s it’s the card holder, with cryptocurrency it’s the vendor that is getting screwed.