He's not missing the point. And, again, Apple is printing the information to the screen. You can't control what shows up on that receipt until after it's already been transmitted and displayed, which is after the damage has already been done. What if somebody walks into the room and sees the number before you can hide the window? Even if you close your browser, are you expected not to make a PDF first? People need to keep records of their transactions, and that happens with online transactions by printing the receipt to a PDF or a printer.
The only way Apple might be absolved is if your browser had a "Don't show my credit card number" option, but that is ludicrous.