It’s not perfect but it’s better than the alternatives. Last four of CC are often used for identity verification, but if I use a unique card number for every site, losing or leaking my Visa card won’t be as harmful.