There's really no good reason for anybody to be asking people for their credit card number any more. 3-D Secure exists and all the major schemes have implementations.

Given two merchants, I'll choose the one that uses a credit card over paypal every day. At least with a credit card I've my bank _and_ the scheme on my side. With paypal, it's me (and my bank) against the world ...