Where's the line on this kind of thing? If I type my CC info into a text file using VS Code should I expect Microsoft to add the CC info to my Microsoft account? What about just typing my CC info into any field when using Windows?

Edit:

> How is this evil? There is literally zero negative outcomes from this.

I like to think of every online account as a liability, because any one of them can be compromised and cause me a bunch of headaches. The "level" of headache depends on how much information each service has about me. What gives Google the right to expose me to more risk in this way?