100% correct, it's sad that we still use hopelessly insecure credit cards, a better system would have non-repudiation built in, charge backs from the customer claiming "I didnt authorise that" would go away