>It seems that Amazon somehow would not even allow me to delete my old and expired credit card from my account.
If you are in the EU, in my experience with the GDPR, this is not allowed. The e-commerce merchant must allow users to have the option to remove this information.
PS: I had to file a formal complaint against a telecom company to have this resolved.