At that point you're effectively delegating KYC through Visa/Mastercard who will run KYC processes. It also ignores scenarios where multiple things are stolen at once (eg malware, cons, etc).