I use my credit card at brick and mortar merchants less and less -- even my local gas station accepts Android/Apple Pay (and presumably contactless card taps, but I couldn't get it to work with my card). Even the cafe I frequent switched to readers (I think they were Square) associated with an iPad so I add a tip and pay with my phone at the table.

But what are they doing to secure online payments? Last time my card number was stolen, all of the fradulent charges were at online merchants.