They would still have to buy the BTC using the credit card, although I agree it is not as easy to trace as physical goods, the eventual BTC for physical transaction could be traced all the way back to the credit card payment for BTC.
So could be a case of security by obscurity here?