How do you figure that? Aside from the obvious credit card data/identity theft, there is also freedom of speech persecutions that can routinely happen should a foreign actor have your data and you traveled to their country.

Example: you are openly gay on your social media posts, and want to vacation in a foreign country that bans homosexuality. Maybe you are critical of the current Chinese leadership but still want to see the Great Wall. These are just low-hanging-fruit examples.

It's misguided to be so careless with your personal data, especially with regards to foreign actors.