Is there any solution in the works for online purchases?
Even when using traditional card numbers, many banks offer you the ability to instantly mint as many cards as you like, so you can just generate a card for the specific website. Often you can even lock the card number to that merchant after the first payment.
Can you convince the powers that be to allow rooted phones to store card credentials?
> Crucially, iOS itself cannot directly access data stored in the secure enclave, so even if malware could make its way onto an iPhone, it would have no access to the data.
https://9to5mac.com/2020/02/12/apples-secure-enclave/
Even if it's not a perfect solution, it's better than handing full account credentials to every online merchant I use. A dedicated FIDO fob would be even better but the phone is something most people already have.