My point is none of the info is stored the way most of you think. The payment processing world isn't just a few servers talking to each other. Most of the servers are hosted elsewhere and are talked to through Middleware/API. With my bank we don't see 95% of the info you key in it goes directly to our MW server and on to the processor in a Token, very similar to Apple but its the older generation. Also, when you get a bank account you hand over all the info, when you apply for a CC online you give all that info. Applying for a CC online with a SS is more dangerous than this by a long shot, especially because FICO's system is crazy complex.
----------
There are STRICT regulations in this industry regulators know everything because we are only allowed to do a few things.
If I'm not mistaken, the hackers of Target and others didn't get their information and successful hack in a fast manner. I believe they gathered customers information bit by bit, little by little, and it accumulated over time.
So though information may not be given to them in one big bow, it is given to them in bits and pieces... none of which is hardly safe.
Better methods are obviously out there so why not accept them?