If you are in the US, the same is true of your social security number.
But good luck with that.
But good luck with that.
It started with just having Name / Card Number / Expiry, all of which are printed right on the card, being all that was necessary to conduct a transaction.
Then they put a magnetic strip on the back of the card and storing the same information in plain text on that strip.
Then they started printing a "secret" 3 or 4 digit number (CVC) on the card for "extra" security.
Now we have chips in cards which helps with brick and mortar transactions in an era when most transactions are online.
At present, I transfer money into my checking account for each and every outgoing transaction, so there's both a small time window and a small limit on the amount of a theft, and I have less to worry about giving out my checking account number for incoming transfers.
Mildly related: At one point I was considering how easily someone could make an e-mail server where valid addresses were all in the form username+code@host, where users could create/manage valid codes using a smartphone app, noting which ones were for which purpose and having inactivity or expiry rules.
Unlike current user+anything@host forms, a the + component would be mandatory, and an incorrect/expired code means spam filtering.