Indeed, so should it be predict instead?

Could be. What do we need to ensure credit card number security for example?

Don't ask for one is by far the best way.

If you absolutely need to do credit card payments, then consider using a third party system to handle it (like Stripe).

Can you explain what you mean by "confidentiality against traffic analysis"?

TA is a tern of art in crypto. It means you can deduce what the parties are communicating and who they are by statistically analysing the sizes, timings and addresses of messages. In practice - it's easy for an eavesdropper to see you are using Gmail, and also possible to deduce whether your email content matches some known messages the eavesdropper possibly has seen before. Etc. One widely known tech that tries to mitigate TA is Tor.

Fan of katas? https://www.codewars.com/kata/5a6c75c8fd5777274e000042